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PREFACE 


The MCF5307 ColdFire® Integrated Microprocessor User's Manual describes the 
programming, capabilities, and operation of the MCF5307 device. Refer to the ColdFire 
Family Programmer's Reference Manual Rev 1.0 (MCF5200PRMREV1/D) for information 
on the ColdFire Family of microprocessors. 
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SECTION 1 
INTRODUCTION 


The MCF5307 integrated microprocessor combines a ColdFire® processor core with a 
Multiply-Accumulate (MAC) unit, DRAM controller, DMA controller, timers, parallel and 
serial interfaces, and system integration. Designed for embedded control applications, the 
ColdFire core delivers enhanced performance while maintaining low system costs. 
Performance boosts are supplied to the clock-doubled core through the on-chip, 8Kbyte 
unified cache and 4K SRAM, which provide pipelined, single-cycle access to critical code 
and data. The integrated MAC module enhances the device’s functionality through support 
of high-speed, complex, arithmetic operations; it can execute16x16 multiplies with a 32-bit 
accumulate in a single cycle and 32x32 multiplies with 32-bit accumulate. The MCF5307 
processor greatly reduces the time required for system design and implementation by 
combining common system functions on chip and providing glueless interfaces to 8-, 16-, 
and 32-bit DRAM, SRAM, ROM, FLASH, and I/O devices. Support for EDO DRAM and 
synchronous DRAM is also present. 


The revolutionary ColdFire microprocessor architecture gives cost-sensitive, high-volume 
markets new levels of price and performance. Based on the concept of variable-length RISC 
instruction-set technology, ColdFire combines the architectural simplicity of conventional 
32-bit RISC with a memory-saving, variable-length instruction set. In defining the ColdFire 
architecture for embedded processing applications, Motorola incorporated RISC 
architecture for peak performance and a simplified version of the variable-length instruction 
set found in the M68000 Family for code density. The MCF5307 is the first of the ColdFire 
family to contain the Version 3, clock-doubled core. Increasing the internal speed of the core 
allows higher performance, while providing the customer with a workable low-speed 
external system interface. 


By using a variable-length instruction-set architecture, embedded system designers using 
ColdFire RISC processors will enjoy significant advantages over conventional fixed-length 
RISC architectures. The denser binary code for ColdFire processors consumes less 
valuable memory than any fixed-length instruction set RISC processor available. This 
improved code density means more efficient system memory use for a given application, 
and requires slower, less costly memory to help achieve a target performance level. 


The integrated peripheral functions provide high performance and flexibility. The DRAM 
controller can interface with up to 256 MBytes of DRAM and supports bursting and page- 
mode operations. In addition, this DRAM controller can connect to both extended-data-out 
(EDO) DRAMs and synchronous DRAMs. : 


Other nonmemory interfaces available include a programmable full-duplex DUART and M- 
Bus (I@C interface ') module. Four channels of DMA allow for fast data transfer using a 


1 |2C is a proprietary Philips bus 
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programmable burst mode independent of processor execution. The two 16-bit general- 
purpose multimode timers provide separate input and output signals. For system protection, 
the processor includes a programmable 16-bit software watchdog timer. In addition, 
common system functions such as chip-selects, interrupt control, bus arbitration, and an 
IEEE 1149.1 JTAG module are included. 


A sophisticated debug interface supports both background-debug mode and real-time trace. 
This interface is present in all ColdFire-based processors and allows common emulator 
support across the entire ColdFire family. 


The primary features of the MCF5307 integrated processor include the following: 


e ColdFire Processor Core 


— Variable-length RISC, clock-doubled Version 3 microprocessor core 
— Eight-stage pipeline separated by a 384-bit queuing buffer 
_ — 32-bit internal address bus with up to 4 Gbytes of linear address space 
— 32-bit data bus 
— 16 user-visible 32-bit wide general-purpose registers 
— Hardware Integer Divide Unit 
— Supervisor/user modes for system protection 
— Vector base register to relocate exception-vector table 
— Optimized for high-level language constructs 


° Multiply and Accumulate Unit 


— Provides high-speed, complex animes processing for signal processing 
applications 

— 1 clock issue with 3-stage execute pipeline 

— Supports both16x16 multiplies and 32x32 multiplies with 32-bit accumulate 


e¢ 8Kbyte Unified Cache 


— Four-way set associative organization with write through and copy back modes: 
— Clock-doubled to match microprocessor core speed 
— Provides fast access to critical code and data 


¢ 4Kbyte SRAM 


— Single-cycle access to code or data 
— Restart model maintains code in memory 


e DMA Controller 


— Four fully programmable channels 

— Supports dual address and single address transfers with 32-bit data capability 
— Two address pointers that can increment or remain constant 

— 16-bit transfer counter 

— Operand packing and unpacking supported 

— Auto-alignment transfers supported for efficient block movement 

— Supports bursting and cycle steal 

— Provides two clock cycle internal access 
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e DRAM Controller (DRAMC) 


— Supports up to 256 MBytes of DRAM | | 
— Programmable refresh timer provides CAS-before-RAS refresh : 


— Support for 2 separate memory banks | 
— Support for extended data out DRAMs and Synchronous DRAMs ca 
e Dual Universal Synchronous/Asynchronous Receiver/Transmitter (DUART) | 


— Full duplex operation 

— Flexible baud-rate generator 

— Modem control signals available (CTS, RTS) 
— Processor-interrupt capability 





Dual 16-Bit General-Purpose Multimode Timers 


— 8-bit prescaler 

— Timer input and output pins 
— Processor-interrupt capability 
— 22 ns resolution 


Motorola Bus (M-Bus) Module 


— Interchip bus interface for EEPROMs, LCD controllers, A/D converters, keypads 
— Fully compatible with industry-standard I@C Bus 

— Master and slave modes support multiple masters 

— Automatic interrupt generation with programmable level 


System Interface 


—  Glueless bus interface with chip selects and DRAMC support for interface to 
— 8-, 16-, and 32-bit for DRAM, SRAM, ROM, FLASH, and I/O devices 
— 8chip-select signals; 2 that are fully programmable with base address registers, 6 
at an offset of one base address register 
—— Programmable wait states and port sizes 
— Programmable interrupt controller 
e Low interrupt latency 
e 4 external interrupt request inputs 
e Programmable autovector generator 
— 16-Bit general-purpose |/O interface 
— IEEE 1149.1 test (JTAG) module 


System Debug Support 


— Real-time trace for determining dynamic execution path 
— Background debug mode (BDM) for debug features while halted 
— Realtime debug support, including three user-visible hardware breakpoint registers 


e Clock-multiplied PLL 
¢ 70 MIPS at 45 MHz (90 MHz clock-doubled internally) 
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(Operating temperature: 0 to +70 C) 


| (Operating temperature: 0 to 70 C and -40 to +85 C) 
e Fully static 3.3-volt operation with 5V tolerant I/O pads 
208 QFP package 


1.1 OVERVIEW 


Offered at 9OMHz core clock with system bus capability of 45, 30, and 22.5 MHz 


Offered at 66MHz core clock with system bus capability of 33, 22, and 16.5 MHz 


Figure 1-1 is a block diagram of the MCF5307 processor. The paragraphs that follow provide 


an overview of the integrated processor. 
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Figure 1-1. MCF5307 Block Diagram 
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1.1.1 CoidFire Processor Core 
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The ColdFire processor Version 3 core consists of two independent, decoupled pipeline 
structures to maximize performance while minimizing core size. The instruction fetch 
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pipeline (IFP) is a six-stage pipeline for prefetching instructions. The IFP contains logic for 
branch prediction. The prefetched instruction stream is then gated into the two-stage 
operand execution pipeline (OEP), which decodes the instruction, fetches the required 
operands and then executes the required function. Because the IFP and OEP pipelines are 
decoupled by an instruction buffer that serves as a FIFO queue, the IFP can prefetch 
instructions in advance of their actual use by the OEP, thereby minimizing time stalled 
waiting for instructions. The OEP is implemented in a two-stage pipeline featuring a 
traditional RISC datapath with a dual-read-ported register file feeding an arithmetic/logic unit 
(ALU). 


1.1.2 Multiply and Accumulate (MAC) Module 


The MAC unit provides a common set of DSP operations and enhances the integer multiply 
instructions in the ColdFire architecture. It provides functionality in three related areas: 
faster signed and unsigned integer multiplies; new multiply-accumulate operations 
supporting signed and unsigned operands; and new miscellaneous register operations. 
Multiplies of 16x16 and 32x32 with 32- bit accumulates are supported. The MAC has a 
single clock issue for 16x16 multiplies and implements a 3-stage execution pipeline. 


1.1.3 8 Kbyte Unified Cache 


The MCF5307 processor contains a high-performance nonblocking, 8-Kbyte, four-way set 
associative unified (instruction and data) cache. The cache improves system performance 
by providing low latency data to the processor core. This decouples processor performance 
from system memory performance and increases bus availability for alternate bus masters. 


The nonblocking design of the MCF5307 cache services read hits or write hits from the 
processor while a line fill (Caused by a cache allocation) is in progress. The cache can 

operate in either writethrough or copyback modes with no write-allocates for misses to 

writethrough memory. Cache design allows the MCF5307 to achieve 75 MIPS. 


Each cache line contains 16 bytes of data, an address tag and control bits. A bursting 
interface for 32-, 16-, and 8-bit port sizes to quickly fill cache lines is supported. A unique 
128-bit store buffer is implemented with the cache to further decouple store operation from 
processor execution. 


1.1.4 Internal 4 Kbyte SRAM 


The 4-Kbyte on-chip SRAM provides one clock-cycle access for the ColdFire core. This 
SRAM can store processor stack and critical code or data segments to maximize 
performance. 


1.1.5 DRAM Controller 


The MCF5307 DRAM controller provides a glueless interface for up to two banks of DRAM, 
each of which can be from 128 Kbytes up to 256 MBytes in size. The controller supports an 
8-, 16-, or 32-bit data bus. A unique addressing scheme allows for increases in system 
memory size without rerouting address lines and rewiring boards. The controller operates in 
regular mode, or page mode, and supports extended-data-out (EDO) DRAMs and 
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synchronous DRAMs. At a 45MHz external bus en the DRAM controller supports 
DRAMs with access times as fast as 22 ns. 


1.1.6 DMA Controller 


MCF5307 provides four fully programmable DMA channels for quick data transfer. Single 
and dual address mode is supported with the ability to program bursting and cycle steal. 
Data is transferred as 32-bits and packing and unpacking is supported. 


1.1.7 DUART Module 


A full duplex DUART module contains an on-chip baud-rate generator, which provides both 
standard and nonstandard baud rates. Data formats can be 5, 6, 7, or 8 bits with even, odd, 
or no parity, and up to 2 stop bits in 1/16 increments. Four-byte receive buffers and two-byte 
transmit buffers minimize CPU service calls. The DUART module also provides several 
error-detection and maskable-interrupt capabilities. Modem support includes request-to- 
send (RTS) and clear-to-send (CTS) lines. 


The system clock provides the clocking function via a programmable prescaler. You can 
select full duplex, autoecho loopback, local loopback, and remote loopback modes. The 
programmable DUART can interrupt the CPU on various normal or error-condition events. 


1.1.8 Timer Module 


The timer module includes two general-purpose timers, each of which contains a free- 
running 16-bit timer for use in any of three modes. One mode captures the timer value with 
an external event. Another mode triggers an external signal or interrupts the CPU when the 
timer reaches a set value, while a third mode counts external events. The timer unit has an 
8-bit prescaler that allows programming of the clock input frequency, which is derived from 
the system clock. The programmable timer-output pin generates either an active-low pulse 
or toggles the output. 


1.1.9 Motorola Bus (M-Bus) Module 


The M-Bus interface is a two-wire, plalrectional serial bus that eycnenges data between 

_ devices and is compliant with the I°C Bus standard. The M-Bus minimizes the 
interconnection between devices in the end system and is best suited for applications that 
need occasional bursts of rapid communication over short distances among several 
devices. Bus capacitance and the number of unique addresses limit the maximum 
communication length and the number of devices that can be connected. 


1.1.10 System Interface 


The MCF5307 processor provides a glueless interface to 8-, 16-, and 32-bit port size SRAM, 
ROM, and peripheral devices with independent programmable control of the assertion and 
negation of chip-selects and write-enables. The MCF5307 also supports bursting ROMs. 


1.1.10.1 EXTERNAL BUS INTERFACE . The bus interface controller transfers information | 
between the ColdFire core or DMA and memory, peripherals, or other devices on the 
external bus. The external bus interface provides 32 bits of address bus space, a 32-bit data 
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bus, and all associated control signals. This interface implements an extended synchronous 
protocol that supports bursting operations. 


Simple two-wire request/acknowledge bus arbitration between the MCF5307 processor and 
another bus master, such as a DMA device, is glueless with arbitration logic internal to the 
MCF5307 processor. Multiple-master arbitration is also available with some external 
arbitration logic. 


1.1.10.2 CHIP-SELECTS. Eight chip-select outputs (two that are programmable with base 
address registers, six at an offset of one base address register) provide signals that enable 
external memory and peripheral circuits for automatic wait-state insertion. These signals 
also interface to 8-, 16-, or 32-bit ports. The base address and access permissions are 
programmable with configuration registers. 


1.1.10.3 16-BIT PARALLEL-PORT INTERFACE. A 16-bit general-purpose 
programmable parallel port serves as either an input or an output on a bit-by-bit basis. 


1.1.10.4 INTERRUPT CONTROLLER. The interrupt controller provides user- 
programmable control of 11 internal peripheral interrupts and implements 4 external fixed 
interrupt request pins. You can program each internal interrupt to any one of 7 interrupt 
levels and 2 priority levels within each of these levels. The external interrupt request pins 
can be programmed to levels 1,3,5, and 7 or levels 2, 4, 6, and 7. Autovector capability is 
available for internal and external interrupts. 


1.1.10.5 JTAG. To help with system diagnostics and manufacturing testing, the MCF5307 
processor includes dedicated user-accessible test logic that complies with the IEEE 
1149.1A standard for boundary scan testability, often referred to as Joint Test Action Group, 
or JTAG. For more information, refer to the IEEE 1149.1A standard. 


1.1.11 System Debug Interface 


The ColdFire processor core debug interface supports real-time trace and debug, plus 
background-debug mode. A four-pin background-debug mode (BDM) interface provides 
system debug. The BDM is a proper subset of the BDM interface provided on Motorola’s 
683XX family of parts. 


In real-time trace, four status lines provide information on processor activity in real time (PST 


pins). A four-bit wide debug data bus (DDATA) displays operand data and change-of-flow 
addresses, which helps track the machine’s dynamic execution path. 
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SECTION 2 
SIGNAL DESCRIPTION 


2.1 INTRODUCTION 


This section describes the MCF5307 input and output signals. The descriptions as shown in 
Table 2-1 are grouped according to relevant functionality. Figure 2-1displays the block 
diagram of the MCF5307 device along with the signal interface. 
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Figure 2-1. MCF5307 Block Diagram 
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Table 2-1. MCF5307 Signal Index 


INPUT/ 
FUNCTION OUTPUT 
All 32 bits of the address bus. For external interrupt 
In/Out 


request, A[4:2] are used to indicate the interrupt level 
Data bus used to transfer byte, word, or longword data In/Out 


~ SIGNAL NAME 














A[31:0] 


D[31:0] 


Identifies read and write transfers. In/Out | 


E ‘i ce 


SIZ[1:0] Indicates the data transfer size. In/Out 
Indicates the beginning of a bus transfer. In/Out 
Indicates a bus cycle has been initiated and address is 
In/Out 
stable 
Transfer Acknowledge — Assertion terminates transfer synchronously. In/Out 
ransfer In Progress TIP Indicates a bus cycle is in progress of running | Out | 
TT[1:0] Indicates the transfer type: normal, CPU space or emula- 


O 
= 


i Pia niD) GO PF 
© Qing Nn] o@ o 2. 
S 215);0/ o Q. 
n o|2 oO. oO 
oO nolo = n 
= Or. = ~” 
<! D/O) | 

Oo =| 

@ g| 4 

© 


tor mode 
:0] Provides supplemental information for each transfer type. 
RQ5, |Four external interrupts are set to default levels 1,3,5,7; 


, IRQ1  juser-alterable. See subsection 2.3.1. 


Indicates processor requires bus mastership. 
Asserted by arbiter to grant mastership to processor. 
Indicates processor is currently driving the bus. 






Transfer Modifier 
Interrupt Request 


— 
ES 
NO 


Out 


D 
O 
= 


D 
© 
(o0) 


us Request 


| 


us Grant 
us Driven 


BG 
B 


me) 


Out 
CLKIN 
BCLKO Out 
RSTO Out 


Enables peripherals at programmed addresses. CS[1:0], 
CS[7] can provide IACK during an interrupt acknowledge 
cycle. CS[0] provides boot ROM 

selection 


BE[3:0)/ Byte enables select individual bytes in memory 
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Table 2-1. MCF5307 Signal Index (Continued) 


INPUT/ 
SIGNAL NAME MNEMONIC FUNCTION OUTPUT 
Motorola Test Mode MTMODJ3:0] |Selects whether processor is in functional or emulator pm 
mode 
High Impedance 


| HIZ _|Assertion three-states all output signal pins. In 

rocessor Clock Out PSTCLK __|Output clock used for processor debug DDATA,PST ; Out | 
Debug Data DDATA[3:0] Displays captured processor data and break-point status. 
Processor Status PST[3:0] _ [Indicates internal processor status. ss a 
Out 
















=) 








Test Clock | == TCK —_|Clock signal for IEEE 1149.1 JTAG FIN 
Serial Clock debug module. 

Peas SeesiSeekfon MSGNT arebreacoominaetugmose nn | 

ware break-point in debug mode. 

onset | odie etm 
ment Serial Input module. 

pen seratoup | Webgmatie | 
ment Serial Output debug module. 


2.2 MCF5307 BUS SIGNALS 


These signals provide the external bus interface to the MCF5307 device. 


2.2.1 Address Bus 


The address bus provides the address of the byte or most significant byte of the word or 
longword being transferred. The address lines also serve as the DRAM address pins. When 
an external master is using the DRAM controller or Chip-Select module, the external master 
drives the address bus and asserts TS or AS to indicate a bus cycle is starting. During an 
interrupt acknowledge access, the lower address lines, A[4:2], indicate the interrupt level 
being acknowledged. 





2.2.1.1 ADDRESS BUS - (A[23:0]). The lower 24 bits of the address bus become valid 
when TS is asserted. Bits A[4:2] indicate the interrupt level during interrupt acknowledge 
cycles. 


2.2.1.2 ADDRESS BUS - (A[31:24]/PP[15:8]). These multiplexed pins can serve as the 
most significant byte of the address bus, or as the most significant byte of the parallel port. 
Programming the Pin Assignment Register (PAR) in the SIM determines the function of each 
of these eight multiplexed pins. You can program these on a bit-by-bit basis. 


A[31:24] 


When any of these pins are enabled in the PAR, they represent the most significant bits of 
the address bus. As much as 4 Gbytes of memory is available when all of these pins are 
programmed as address signals. 
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PP[15:8] 
When any of these pins are enabled in the PAR, they represent the most significant bits of 
the parallel port. 


2.2.2 Data Bus (D[31:0]) 


The data bus is a bidirectional, non-multiplexed bus. Data is latched on the bus on the rising 
clock edge. When interfacing with external memory or peripherals, the data bus port width, 
wait states, and internal termination are initially defined by D[7:0] during reset. You can 
program the port width for each chip-select and DRAM bank. The data bus uses the default 
configuration if none of the chip-selects or DRAM bank match the address decode. The 
default configuration is 32-bit port, with external termination, and burst inhibited. The data 
bus transfers byte, word, or longword-sized data. All 32 bits of the data bus are driven during 
writes, regardless of port width or operand size. 


2.2.3 Read/Write - (R/W) 


When the MCF5307 processor is the bus master, it drives the R/W signal to indicate the 
direction of subsequent data transfers. It is driven high during read bus cycles and driven 
low during write bus cycles. This signal is an input during alternate master access. 


2.2.4 Size - (SIZ[1:0}) 


When it is the bus master, the MCF5307 processor outputs these signals to indicate the 
requested data transfer size. Table 2-2 shows the definition of the bus request size 
encodings. When the MCF5307 device is not the bus master, these signals function as 
inputs. | 


Table 2-2. Bus Cycle Size Encoding 


Port Size 





2.2.5 Transfer Start - (TS) 


The MCF5307 processor asserts this signal during the first clock cycle when address and 
attributes (TM, TT, TM, TIP, R/W, size) are valid address is driven on A[31:0] and is negated 
in the following clock cycle. When the MCF5307 device is not the bus master, TS is an input. 


2.2.6 Address Strobe - (AS) 


Address Strobe is an active-low signal that indicates the start of a bus cycle and the address 
is stable. The address and attributes are guaranteed to be valid during the entire period that 


AS is asserted. This signal is asserted and negated on the falling edge of the clock. When 
the MCF5307 device is not the bus master, AS is an input. 
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2.2.7 Transfer Acknowledge - (TA) 


‘When the MCF5307 device is master, the external system drives this input signal to 
terminate the bus transfer. The bus will continue to be driven until this synchronous signal 
is asserted. For write cycles, the processor will continue to drive data one clock after TA is 
asserted. During read cycles, the peripheral must continue to drive data until TA is 
recognized. The TA signal may be tied low if all bus cycles can support fast termination.Note 
that TA cannot be tied low if external masters are present. The MCF5307 device will drive 
TA if an external master requests it. 





2.2.8 Transfer In Progress - (TIP/PP[7]) 


This multiplexed pin can serve as the transfer in progress output, or as one bit of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of this pin. 

This output is asserted to indicate that a bus transfer is in progress and is negated during 

idle bus cycles if the bus is still granted to the processor. Note that TIP is held asserted on 
back-to-back bus cycies. 


2.2.9 Transfer Type - (TT[1:0]/PP[1:0]) 


These multiplexed pins can serve as the transfer type outputs, or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of each of these two multiplexed pins. The pins are programmable on a bit-by-bit basis. 


When the MCF5307 is the bus master, it outputs these signals. They indicate the type of 
access for the current bus access. Table 2-3 shows the definition of the encodings. 


Table 2-3. Bus Cycle Transfer Type Encoding 


TRANSFER TYPE 
a 


2.2.10 Transfer Modifier - (TM[2:0]/PP[4:2]) 


These multiplexed pins can serve as the transfer type outputs, or as three bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of each of these three multiplexed pins (which are programmable on a bit-by-bit basis). 













These input signals provide supplemental information for each transfer type (see Table 2-4). 
For emulation transfers, the TM signals indicate user or data transfer types (see Table 2-5). 
For CPU space transfers, the TM signals are low (see Table 2-6). For interrupt acknowledge 
transfers, the TM signals carry the interrupt level being acknowledged (see Table 2-6). See 
the alternate master section for information on TM decoding. 
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Table 2-4. Transfer Modifier Encodings for TT = 00 


Table 2-5. Transfer Modifier Encodings for TT = 10 
TM[2:0] 


TRANSFER MODIFIER 


Emulator Mode Data Access 
110 Emulator Mode Code Access 


Table 2-6. Transfer Modifier Encodings for TT = 11 


TM[2:0] TRANSFER MODIFIER 
CPU Space | 
0 
0 
1 


TM[2:0] 







































Interrupt Level 2 Acknowledge 


interrupt Level 1 Acknowledge 






10 
11 
01 
111 
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2.3 INTERRUPT CONTROL SIGNALS 
These pins supply the external interrupt level to the MCF5307 device. 


2.3.1 Interrupt Request - (IRQ7,IRQ5, IRQ3,IRQ1) 


You can use these four pins as pre-defined interrupt request signals(IRQx). The IRQx pins 
are set to default interrupt request levels for users, corresponding to levels 1, 3, 5, and 7 bus 
control signals. Programming the Pin Assignment Register (PAR) in the SIM determines the 
function of this pin.In the Pin Assignment Register, you can redefine the interrupt levels for 
IRQS, IRQ3, and IRQ1 (on a bit-by-bit basis). 


2.4 BUS ARBITRATION SIGNALS 
These pins provide the external bus arbitration control for the MCF5307 device. 


2.4.1 Bus Request - (BR) 


This output signal indicates to an external arbiter that the processor needs to become bus 
master for one or more bus cycles. BR is negated when the MCF5307 processor begins an 
access to the external bus with no other internal accesses pending, and BR remains 
negated until another internal request occurs. 


2.4.2 Bus Grant - (BG) 


An external arbiter asserts this input signal to indicate that the MCF5307 device can control 
the bus at the next rising edge of BCLKO. When the arbiter negates BG, the MCF5307 
processor must relinquish the bus as soon as the current transfer is complete. The external 
arbiter must not grant the bus to any other master until both BD and BG are negated. 


2.4.3 Bus Driven - (BD) 


The MCF5307 device asserts this output signal to indicate that it is the current master when 
it is driving the bus. If the MCF5307 device is the bus master but is not using the bus, the BD 
signal is not asserted. If the MCF5307 processor loses bus mastership during a bus transfer, 
it will complete the last transfer of the current access, negate BD, and three-state all bus 
signals on the rising edge of BCLKO. If the MCF5307 processor loses bus mastership during 
an idle clock cycle, it will three-state all bus signals on the rising edge of BCLKO. 


2.5 CLOCK AND RESET SIGNALS 
These signals provide the external system interface for the MCF5307 device. 


2.5.1 Reset - (RSTI) 


Asserting RSTI will cause the MCF5307 processor to enter reset exception processing. 
When RSTI is recognized, the address bus, data bus, TT, SIZ, R/W, AS and TS will be three- 
stated; BR and BD will be negated. 


2.5.2 Clock Input - (CLKIN) 


CLKIN is the MCF5307 input clock frequency to the on-board phase-locked loop-clock 
generator. CLKIN is used to internally clock or sequence the MCF5307 internal bus interface 
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and slave module logic. 


2.5.3 System Bus Clock Output -(BCLKO) — 


This output signal is generated by the internal PLL, and is the system bus clock output used 
as the bus timing reference by the external devices. BCLKO is a 1/2, 1/8, or 1/4 of the 
processor clock. | 


2.5.4 Reset Out - (RSTO) 


Following the assertion of RSTI, the PLL will lose its lock temporarily. During this time, the 
RSTO signal will assert. When the PLL regains lock, the RSTO signal will again negate. You 
can use this signal to reset external devices. | 


2.5.5 Frequency Control PLL - FREQ[1:0] 


This 2 bit input bus indicates the frequency range of CLKIN. These signals are multiplexed 
with D[3:2] and are sampled during the assertion of RESET. These signals indicate to the 
PLL what frequency range it will be operating, as indicated in Table 2-7 shown below. Note 
that these signals do not affect the frequency, but are required to set up the analog PLL. 





Table 2-7. CLKIN Frequency 


FREQ(1:0}/ | FREQUENCY 
OF CLKIN 
D[3:2] (MHZ) 


16.6 - 27.999 


2.5.6 Divide Control PCLK to BCLK - DIVIDE[1:0] 


This 2-bit input bus indicates the BCLK/PSTCLK ratio. These signals are sampled during 
the assertion of RESET and indicate the ratios as indicated in Table 2-8 shown below. 


Table 2-8. BCLK/PSTCLK Divide Ratios 
DIVIDE[1:0]/ | RATIOOF | 
D[1:0] BCLK/PSTCLK 















2-8 | MCF5307 User’s Manual MOTOROLA 


SIGNAL DESCRIPTION 


2.6 CHIP-SELECTS 


The MCF5307 device provides eight programmable chip-selects that can directly interface 
with SRAM, EPROM, EEPROM, and peripherals. 


2.6.1 Chip-Selects - (CS[7:0]) 


You can program each chip-select for an address location as well as for masking 
Capabilities, port size and burst-capability indication, wait-state generation, and internal/ 
external termination. A reset disables all chip-selects. CS[0] is also unique because it can 
function at reset as a global chip-select that allows you to select boot ROM at any defined 
address space. CS[0] is the only chip-select initialized out of reset. Port size and termination 
(internal vs. external) for CS[0] are configured by the levels on D[7:0] when RSTI negates. 


2.6.2 Chip-Select Config - (CS_CONF[2:0]) 


These pins are multiplexed on Data Pins D[7:5] respectively. Their states are latched at the 
time reset (RSTI) is negated, and this information is used to determine the mode of 
operation for chip-select zero (CS[0]) for initial operation. 








Table 2-9. D[6] and D[5] Selection of CSO Port Size 


BOOT CSO PORT 
SIZE 









| 0 | Disabled 
Enabled with 15 wait states 


Provided the required address range is first loaded into CSAR, you can program CSO to 
continue to decode for a range of addresses after the V-bit is set. After the V-bit is set for 
CSO, a system reset can restore global chip-select. 


2.6.3 Byte Enables/Byte Write Enables - (BE[3:0]/BWE[3:0]) 


The four byte-enable pins are multiplexed with the byte-write-enable pins of the MCF5307 
device. You can program each of these four multiplexed pins through the Chip-Select 
Control Register on an individual chip-select basis. 
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2.6.4 Output Enable - (OE) ~ 


This signal is sent to the interfacing memory and/or peripheral to enable a read transfer. It 
is asserted and negated on the falling edge of the clock. This signal is asserted only when 
there is a match of one of the chip-select for the current address decode. 


2.7 DRAM CONTROLLER SIGNALS 

The following DRAM signals provide a seamless interface to external DRAM. DRAM widths 
of 8-, 16-, and 32- bits are supported and can access as much as 256 Mbytes of memory. 
2.7.1 Row Address Strobes - (RAS[1:0]) 


These active-low pins provide a seamless interface to Row Address Strobe inputs on 
industry standard DRAMs. These pins provide RAS for a given DRAM bank. Banks 
correspond to specific Base Address and Control information programmed in the DCM 
registers (see DRAM section for a description). RAS[O] corresponds to bank 0 and RAS[1] 
corresponds to Bank 1. 

2./.2 Column Address Strobes - (CAS[3:0]) 


These active-low pins provide a seamless interface to Column Address Strobe inputs on 
industry standard DRAMs. These provide CAS for a given DRAM bank. CAS[3:0] controls 
access to the most significant to least significant byte of data, respectively. . 


2./.3 DRAM Read/Write - (DRAMW) 
This active-low pin is asserted to signify that a DRAM write cycle is underway. 


2.7.4 Synchronous DRAM Column Address Strobe - (SCAS) 


This active-low output signal is registered during synchronous mode to route directly to the 
SCAS signal of SDRAMs. 


2./.5 Synchronous DRAM Row Address Strobe - (SRAS) 


This active-low output signal is registered during synchronous mode to route directly to the 
SRAS signal of external SDRAMs. 


2./.6 Synchronous DRAM Clock Enable - (SCKE) 


This active high output signal is registered during synchronous mode to route directly to the 
SCKE signal of external SDRAMs 


2./.7 Synchronous Edge Select - (EDGESEL) 


This input signal helps select additional output hold time for signals that interface to external 
SDRAMs. 





This signal can provide three modes of operation for the SDRAM interface signals. When 
this signal is tied high, the interface signals to the SDRAM will change on the rising edge of 
the clock (BCLKO). When this signal is tied low, the interface signals to the SDRAM will 
change on the falling edge of the clock (BCLKO). When this signal is tied to the SDRAM 
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clock, the interface signals to the SDRAM will change on the rising edge of the SDRAM 
clock. The various configurations of this signal can provide additional output hold time for 
the interface signals provided to the SDRAM. 

2.8 DMA MODULE SIGNALS 

The direct memory access (DMA) controller module uses the following signals to provide 
external request for either a source or destination. 


2.8.1 DMA Request (DREQ[1:0]/PP[6:5]) 


These multiplexed pins can serve as the DMA request inputs, or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SCM determines the function 
of each of these three multiplexed pins. The pins are programmable on a bit-by-bit basis. 


These active-low inputs are asserted by a peripheral device to request an operand transfer 
between that peripheral and memory. 


2.9 SERIAL MODULE SIGNALS 

The signals listed below transfer serial data between the DUART module and external 
peripherals. 

2.9.1 Receive Data - (RD[1:0]) 


These are the inputs on which serial data is received by the DUART. Data is sampled on 
RD[1:0] on the rising edge of the serial clock source, with the least significant bit received 
first. 

2.9.2 Transmit Data - (TD[1:0]) 


The DUART transmits serial data on these output signals. Data is transmitted on the falling 
edge of the serial clock source, with the least significant bit transmitted (LSB) first. When no 
data is being transmitted or the transmitter is disabled, these two signals are held high. 
TD[1:0] are also held high in local loopback mode. 

2.9.3 Request To Send - (RTS[1:0]) 

The request-to-send outputs indicate to the peripheral device that the DUART is ready to 
send data and requires a clear-to-send signal to initiate transfer. 

2.9.4 Clear To Send - (CTS[1:0]) 

Peripherals drive these inputs to indicate to the MCF5307 serial module that it can begin 
data transmission. | 


2.10 TIMER MODULE SIGNALS 


The signals that follow are external interface to the two general-purpose MCF5307 timers. 
This 16-bit timer can capture timer values, trigger external events or internal interrupts, or 
count external events. 
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2.10.1 Timer Input - (TIN[1:0]) 


You can program these inputs as clocks that cause events in the counter and prescalars. 
They can also cause capture on the rising edge, falling edge, or both edges. 


2.10.2 Timer Output - (TOUT1, TOUTO) 


These programmable outputs pulse or toggle on various timer events. 


2.11 PARALLEL PORT (PP[15:0]) 


This 16-bit bus is dedicated for general-purpose I/O. The parallel port is multiplexed with the 
A[31:24], TT[1:0], TM[2:0], TIP, DREQ[1:0]. These 16 bits are programmed for functionality 
with the Pin Assignment Register (PAR) in the SIM. 


The system designer controls the reset value of this register by driving the external data bus 
bit 4 (Data[4]) with a 1 or O when the RSTI (reset input to MCF5307 device) negates. The 
logic level on Data[4] pin that is latched at negation of RSTI is loaded into all bit positions of 
PP_RESET_SEL. The system is configured as PP[15:0] if Data[4] is 0; otherwise alternate 
pin functions selected by PAR=1 will be used. This value may be driven with a weak pullup 
or pulldown resistor. 


2.12 M-BUS MODULE SIGNALS 


The M-Bus module acts as a quick two-wire, bidirectional serial interface between the 
MCF5307 processor and peripherals with an M-Bus interface (e.g., LED controller, A-to-D 
converter, D-to-A converter). All devices connected to the M-Bus must have open-drain or 
open-collector outputs. 


2.12.1 M-Bus Serial Clock (SCL) 


This bidirectional, open-drain signal is the clock signal for M-Bus module operation. The M- 
Bus module controls this signal when the bus is in master mode; all M-Bus devices drive this 
signal to synchronize M-Bus timing. 


2.12.2 M-Bus Serial Data (SDA) 


This bidirectional, open-drain signal is the data input/output for the serial M-Bus interface. 


2.13 DEBUG AND TEST SIGNALS 


These signals interface with external I/O to provide processor status signals. 


2.13.1 Test Mode - (MTMODJ[3:0]) 


These signals choose between the BDM and JTAG signals that are multiplexed together. 
When MTMODJB:0]=0000, the part is in BDM mode; when MTMODJB:0]= 0001, itis in JTAG 
mode. Note: All other combinations of MTMOD are reserved. 
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2.13.2 High Impedance - (HIZ) 


The assertion of HIZ will force all output drivers to a high-impedance state. The timing on 
HIZ is independent of the clock. Note that HIZ does not override the JTAG operation; TDO/ 
DSO can be forced to high impedance by asserting TRST. 


2.13.3 Processor Clock Output - (PSTCLK) 


The internal PLL generates this output signal, and is the processor clock output that is used 
as the timing reference for the Debug bus timing (DDATA[3:0] and PST[8:0]). PSTCLK is at 
the same frequency as the core processor and cache memory. The frequency will be 2x the 
CLKIN. 


2.13.4 Debug Data - (DDATA[3:0]) 


The debug data pins are four bits wide, DDATA[3:0]. This nibble-wide bus displays captured 
processor data and break-point status. See Section 16 Debug Support for additional 
information on this bus. 


2.13.5 Processor Status - (PST[3:0]) 


The processor status pins indicate the MCF5307 processor status. During debug mode, the 
timing is synchronous with the processor clock (PSTCLK) and the status is not related to the 
current bus transfer. Table 2-11 shows the encodings of these signals. | 





Table 2-11. Processor Status Signal Encodings 


Emulator-mode entry exception processing 
Processor is stopped, waiting for interrupt 
Processor is halted 
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2.14 BDM/JTAG SIGNALS 


The MCF5307 device complies with the IEEE 1149.1a JTAG testing planaare: The JTAG 
test pins are multiplexed with background ore pins. 


2.14.1 Test Clock - (TCK) 


TCK is the dedicated JTAG test logic clock that is independent of the MCF5307 processor 

clock. Various JTAG operations occur on the rising or falling edge of TCK. The internal JTAG 
controller logic is designed such that holding TCK high or low for an indefinite period of time 
will not cause the JTAG test logic to lose state information. If TCK will not be used, it should 
be tied to ground. 


2.14.2 Test Reset/Development Serial Clock - (TRST/DSCLK) 


The MTMODJ[3:0] signals determine the function of this dual-purpose pin. If 
MTMODJ3:0]=0000, the DSCLK function is selected. If MTMOD[3:0]= 0001, the TRST 
function is selected. MTMOD[3:0] should not be changed while RSTI = 1. When used as 
TRST, this pin will asynchronously reset the internal JTAG controller to the test logic reset 
state, causing the JTAG instruction register to choose the “bypass” command. When this 
occurs, all the JTAG logic is benign and will not interfere with the normal functionality of the 
MCF5307 processor. Although this signal is asynchronous, Motorola recommends that 
TRST make only a0 to 1 (asserted to negated) transition while TMS is held at a logic 1 value. 
TRST has an internal pullup so that if it is not driven low its value will default to a logic level 
of 1. However, if TRST will not be used, it can either be tied to ground or, if TCK is clocked, 
it can be tied to VDD. The former connection will place the JTAG controller in the test logic 
reset state immediately, while the later connection will cause the JTAG controller (if TMS is 
a logic 1) to eventually end up in the test logic reset state after 5 clocks of TCK. 








This pin is also used as the development serial clock (DSCLK) for the serial interface to the 
Debug Module. The maximum frequency for the DSCLK signal is 1/2 the BCLKO frequency. 
See Section 16 Debug Support for additional information on this signal. 


2.14.3 Test Mode Select/ Break Point (TMS/BKPT) 


The MTMODJ[3:0] signals determine this pin’s dual function. lf MTMOD[3:0] =0000, the 
BKPT function is selected. If MTMOD[3:0] = 0001, then the TMS function is selected. 
MTMODJ3:0] should not change while RSTI = 1. When used as TMS, this input signal 
provides the JTAG controller with information to determine which test operation mode should 
be performed. The value of TMS and current state of the internal 16-state JTAG controller 
state machine at the rising edge of TCK determine whether the JTAG controller holds its 
current state or advances to the next state. This directly controls whether JTAG data or 
instruction operations occur. TMS has an internal pullup so that if it is not driven low, its value 
will default to a logic level of 1. However, if TMS will not be used, it should be tied to VDD. 
This pin also signals a hardware breakpoint to the processor when in the debug mode. See 
Section 16 Debug Support for additional information on this signal. 





2.14.4 Test Data Input/Development Serial Input - .(TDI/DSI) 


This is a dual-function pin. If MTMOD[3:0] = 0000, then DSI is selected. If MTMOD[3:0] = 
0001, then TDI is selected. When used as TDI, this input signal provides the serial data port 
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for loading the various JTAG shift registers composed of the boundary scan register, the 
bypass register, and the instruction register. Shifting in of data depends on the state of the 
JTAG controller state machine and the instruction currently in the instruction register. This 
data shift occurs on the rising edge of TCK. TDI also has an internal pullup so that if it is not 
driven low its value will default to a logic level of 1. However, if TDI will not be used, it should 
be tied to VDD. 


This pin also provides the single-bit communication for the debug module commands. See 
Section 16 Debug Support for additional information on this signal. 


2.14.5 Test Data Output/Development Serial Output - (TDO/DSO) 


This is a dual-function pin. When MTMOD[3:0] = 0000, then DSO is selected. When 
MTMODJ[3:0] = 0001, TDO is selected. When used as TDO, this output signal provides the 
serial data port for outputting data from the JTAG logic. Shifting out of data depends on the 
state of the JTAG controller state machine and the instruction currently in the instruction 
register. This data shift occurs on the falling edge of TCK. When TDO is not outputting test 
data, it is three-stated. TDO can also be placed in three-state mode to allow bussed or 
parallel connections to other devices having JTAG. This signal also provides single-bit 
communication for the debug module responses. See Section 16 Debug Support for 
additional information on this signal. 
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3.1 ENHANCEMENTS 


The MCF5307 is the first embedded microprocessor to utilize the performance-enhanced 
version 3 microprocessor core. This emphasis on the design of this processor core was on 
performance, backward compatibility, and as a step in the progression toward much higher 
performance embedded microprocessors. The version 3 core is an enhanced version of the 
version 2 core used in Motorola embedded processors such as the CF5206. Enhancements 
to the version 3 core include: 


¢ 0.35-micron, triple-level-metal CMOS 

e¢ Clock-doubled core (9QOMHz and 66MHz) 

e Bus speeds at 1/2, 1/3, or 1/4 the processor core speed 
e Enhanced pipeline 

e Enhanced instruction buffer 

e Change of flow acceleration 

e |llegal opcode handling 

e Hardware MAC and Divide execution units added 

e Debug module enhancements 


3.1.1 Process 


The MCF5307 is manufactured in a 0.35-micron CMOS process with triple-layer-metal 
routing technology. This process provides a combination of high performance and low 
power needed for embedded system applications. Inputs are 5V tolerant and outputs are 
CMOS or open-drain CMOS with outputs operating from VDD+0.5V to GND-O.5V, and with 
guaranteed TTL-level specifications. 


3.1.2 Clock Doubled Microprocessor Core 


The MCF5307 incorporates a clock-doubling phase-locked loop, as shown in Figure 3-1, 
that provides a clock source up to 9OMHz for the processor core with a 45MHz input clock. 
The processor along with the unified cache and the integrated SRAM all operate at the 
higher speed clock. When combined with the enhanced pipeline structure of the Version 3 
ColdFire, the processor and its local memories provide a high level of performance for 
today’s demanding embedded applications. 
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Figure 3-1. Clock Generation Block Diagram 


3.1.3 Bus Clock at 1/2, 1/3, or 1/4 Processor Clock 


For lower speed peripheral devices, the high-speed processor clock is running at a 
frequency much higher than required. For example, a UART running at 115K baud requires 
a much lower speed clock to keep up with the serial lines and to communicate with the 
microprocessor core. Running the UART at the high-speed processor clock requires higher 
power and a more complicated, high-speed bus interface. With the MCF5307, the bus clock 
can be selected at reset to be 1/2, 1/3, or 1/4 the processor clock (1, 2/3, or 1/2 CLOCKIN). 
This clock is the basis for bus cycles for all on-chip peripherals and the external bus 
interface. 


3.1.4 Enhanced Pipeline 


All ColdFire processor cores consist of two independent, decoupled pipeline structures to 
maximize performance while minimizing core size. The Instruction Fetch Pipeline (IFP) 
prefetches instructions, while the Operand Execution Pipeline (OEP) decodes the 
instruction, fetches the required operands and then executes the specified function. 
Because the IFP and OEP are decoupled by an instruction buffer that serves as a FIFO 
queue, the IFP can prefetch instructions in advance of their actual use by the OEP, thereby 
minimizing the time stalled waiting for the variable-length instructions. The OEP is 
implemented in a two-stage pipeline featuring a traditional RISC datapath with a dual-read- 
ported register file feeding an arithmetic/logic unit. 


While one of the goals of the original ColdFire microarchitecture was to minimize overall 
size, the driving factor in the Version 3 design was to better balance the logic delays 
associated with each pipeline stage to allow the operating frequency to be raised 
significantly. For some functions, this required new pipeline stages to be added to support 
the high frequency goals. In particular, access on the processor's local high-speed bus were 
reimplemented to use a two-stage pipelined bus to the cache and SRAM memories. The net 
effect is that the Version 3 pipeline structure is considerably different from the Version 2 
design. The V3 Instruction Fetch Pipeline is a four-stage design with an optional instruction 
buffer stage, while the Operand Execution Pipeline retains its two-stage structure. In the 
OEP design, each pipeline stage has multiple functions. 
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Figure 3-2. ColdFire Enhanced Pipeline 


The V3 pipeline stages include the following: 


e Instruction Fetch Pipeline 
e Instruction Address Generation (IAG) - Calculation of the next prefetch address 
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e Instruction Fetch Cycle 1 (IC1) - Initiation of prefetch access on the processor's local 
bus 


e Instruction Fetch Cycle 2 (IC2) - Completion of prefetch access on the processor’s local 
bus. 


e Instruction Early Decode (IED) - Generation of time-critical decode signals needed for 
the OEP. 


e Instruction Buffer (IB) - Optional buffer stage using FIFO queue 


PROCESSOR CLOCK CYCLES 
INSTRUCTION 1 2 3 4 5 6 7 8 9 


MOVE.L A0,DO ico | icp | psoc 
MOVE.L 1(A0),D1 | WG | ici | ice | ep | psoc | AGEX 
ADD.L  D1,D0 | iG | ici | ice | IED | psoc | AGEX | 
BEQ $10000 | Gc | ict [ ice | ten [ psoc | acex | 













Figure 3-3. Pipelined Instruction Sequence 


To more than double the processor clock rate, enhancements were required for the pipeline. 
Complex logical operations take a finite amount of time to execute. If there is not enough 
time left in the cycle, either the clock frequency must be reduced or pipelining added to 
divide up the logical work into synchronous stages, completing the task across several clock 
cycles instead of one. In doing this, the time required to complete an instruction, or 
instruction latency, is increased, but once the pipeline is filled, instructions are retired at a 
rate close to one per cycle for most instructions. The stages for the pipeline are divide into 
two functional blocks- the Instruction Fetch Pipeline and the Operand Execution Pipeline. 


Operand Execution Pipeline: 


e Decode and Select / Operand Fetch Cycle (DSOC) - Decode the instruction and fetch 
the required components for the effective address calculation, or the operand fetch 
cycle. 


e Address Generation / Execute Cycle (AGEX) - Calculate the operand address, or per- 
form the execution of the instruction. : 


For register-to-register and register-to-memory store operations, the instruction passes 
through the two stages of the OEP once. For memory-to-register and read-modify-write 
memory operations, the instruction is effectively staged through the OEP twice: the first time 
to calculate the effective address and initiate the operand fetch on the processor’s local bus, 
and the second time to complete the operand reference and perform the required function 
defined by the instruction. 


It should be noted that the organization of the Version 3 instruction buffer is fundamentally 
different than the Version 2 approach. One of the time-critical decode fields provided by the 
“early decode” stage of the IFP is the instruction length. By knowing the length of the 
prefetched instructions, the IED field is able to package the fetched data into machine 
instructions and load them into the FIFO instruction buffer in that form. This approach greatly 
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accelerates the OEP read logic. As one instruction is completed in the OEP, the next 
instruction, regardless of instruction length, is read from the next sequential buffer location 
and loaded into the instruction registers. The Version 3 instruction buffer provides storage 
for eight machine instructions. 


The resulting pipeline and local bus structure allows the Version 3 ColdFire processor core 
to deliver sustained high performance across a variety of demanding embedded 
applications. When operating in a 90/45MHz configuration, the MCF5307 is capable of 70 
Dhrystone MIPS of performance. 


3.1.5 Change Of Flow Acceleration 


Because the Version 3 Instruction Fetch and Operand Execution Pipelines are decoupled 
by the instruction buffer, the increased depth of the IFP is generally hidden from the OEP 
instruction execution rate. The one exception is change-of-flow instructions, e.g., 
unconditional branches or jumps, subroutine calls, taken conditional branches, etc. For 
these instructions, the increased depth of the IFP pipeline is fully exposed. To minimize the 
effects of this increased depth, a logic module dedicated to change-of-flow acceleration was 
developed for the IED stage of the Instruction Fetch Pipeline. 


The basic premise of the Version 3 branch acceleration is to detect certain types of change- 
of-flow instructions, calculate their target instruction address, and immediately begin 
fetching down the target stream. By allowing the switching of the prefetch stream to be 
handled completely within the IFP without any Operand Execution Pipeline intervention, the 
typical execution time is greatly improved. 


As an example, consider a PC-relative unconditional branch using the BRA instruction. The 
branch acceleration logic searches the prefetch stream for this type of opcode. Once 
encountered, the acceleration logic calculates the target address by summing the current 
instruction prefetch address with a displacement contained in the instruction. This detection 
and calculation of the target address occurs in the IED stage of the BRA prefetch. The target 
address is then immediately fed back into the IAG stage, causing the current prefetch 
stream to be discarded and a new stream at the target address established. Given that the 
two pipelines are decoupled, in many cases, the target instruction is available to the OEP 
immediately after the BRA instruction, making its execution time appear as a single cycie. 


The acceleration logic uses a static prediction algorithm when processing conditional branch 
(Bcc) instructions. The default prediction scheme is forward Bcc instructions are predicted 
as not-taken, while backward Bcc opcodes are predicted as taken. A user-mode control bit 
(bit 7 of the CCR) is provided to allow users to dynamically alter the prediction algorithm for 
forward Bcc instructions. See subsection 3.2.1.5 on the CCR for details. 


Depending on the runtime characteristics of an application, processor performance may be 
increased significantly by the assertion or negation of this configuration bit. See subsection 
3.13 on Branch Instruction Execution Times for details on individual instruction 
performance. 
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3.1.6 Illegal Opcode Handling 


As an aid in conversion from M68000 Family code, all instruction bits are parsed to insure 
all instructions are valid. If the processor attempts execution of an illegal or nonsupported 
instruction, an illegal instruction exception is taken. 


3.1.7 Hardware Multiply / Accumulate and Divide Execution Units 


The MAC unit provides a limited set of DSP operations that are currently being used in 
embedded code today while also supporting the integer multiply instructions in the ColdFire 
microprocessor family. 


The MAC unit provides functionality in three related areas: 


¢ Signed and unsigned integer multiplies 
e Multiply-accumulate operations supporting signed and unsigned operands 
Miscellaneous register operations 


OPERAND A OPERAND B 








SHIFT 0,1,-1 





ACCUMULATOR 


Figure 3-4. ColdFire Multiply-Accumulate Block Diagram 


The ColdFire MAC has been optimized for 16x16 multiplies to keep silicon costs down. The 
MAC unit is tightly coupled to the processor's Operand Execution Pipeline and features a 
three-stage execution pipeline. The OEP can issue a 16 x 16 multiply with a 32-bit 
accumulate operation in a single cycle, while a 32 x 32 multiply with a 32-bit accumulation 
requires three cycles before the next instruction can be issued. Figure 3-4 shows the basic 
functionality diagram of the ColdFire MAC. 
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The MCF5307 processor also includes a hardware divider which performs a number of 
integer divide operations. The supported divide functions include: 32/16 producing a 16-bit 
quotient and a 16-bit remainder, 32/32 producing a 32-bit quotient, and 32/32 producing a 
32-bit remainder. 


3.1.8 Debug Module Enhancements 


The MCF5307 is the first processor to use the enhanced Revision B debug module 
definition. Enhancements include the following: 





e Serial BDM command to display current program counter without halting the CPU 
e Added capability to logically OR hardware breakpoint triggers 

e Added registers to support concurrent BDM commands and active breakpoints 

e An external mechanism to generate a debug interrupt 

e A program-visible register field to identify the debug module revision 


The enhanced functionality of the Revision B debug specification is fully backward 
compatible with the original definition. 


3.2 PROGRAMMING MODEL 


The MCF5307 microprocessor core programming model consists of three instruction and 
register groups: user, user-mode MAC, and supervisor. Programs executing in user mode 
are restricted to the basic user and MAC instructions and programming models. System 
software executing in supervisor mode can reference all user-mode and MAC instructions 
and registers plus an additional set of privileged instructions and control registers. The 
appropriate programming model is selected based on the privilege level (user or Supervisor) 
of the processor as defined by the S-bit of the status register. The following paragraphs 
describe the registers in the user, MAC and supervisor programming models. 


3.2.1 User Programming Model 
Figure 3-5 illustrates the user programming model. The model is the same as for M68000 
Family microprocessors, consisting of the following registers: 
¢ 16 general-purpose 32-bit registers (DO—D7, AO—A7) 
¢ 32-bit program counter (PC) 
e 8-bit condition code register (CCR) 
3.2.1.1 DATA REGISTERS (DO-—D7). Registers DO—D7 are used as data registers for bit (1 


bit), byte (8-bit), word (16-bit) and longword (32-bit) operations and can also be used as 
index registers. 


3.2.1.2 ADDRESS REGISTERS (A0-A6). These registers can be used as software stack 
pointers, index registers, or base address registers as well as for word and longword 
operations. 
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Figure 3-5. User Programming Model 


3.2.1.3 STACK POINTER (A7). The ColdFire architecture supports a single hardware 
stack pointer (A7) for explicit references or implicit ones during stacking for subroutine calls 
and returns and exception handling. The initial value of A7 is loaded from the reset exception 
vector, address $0. The same register is used for both user and supervisor mode as well as 
word and longword operations. 


A subroutine call saves the PC on the stack and the return restores it from the stack. Both 
the PC and the SR are saved on the stack during the processing of exceptions and 
interrupts. The return from exception instruction restores the SR and PC values from the 
stack. 


3.2.1.4 PROGRAM COUNTER. The PC contains the address of the currently executing 
instruction. During instruction execution and exception processing, the processor 
automatically increments the contents of the PC or places a new value in the PC, as 
appropriate. For some addressing modes, the PC can be used as a pointer for PC-relative 
operand addressing. 


3.2.1.5 CONDITION CODE REGISTER . The CCR is the least significant byte of the 
processor status register (SR). Bits 4—0 represent indicator flags based on results generated 
by processor operations. Bit 4, the extend bit (X-bit), is also used as an input operand during 
multiprecision arithmetic computations. 


4 3 2 1 0 
Pe NS ev 
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X— extend condition code bit 


N— negative condition code bit 
Set if the most significant bit of the result is set; otherwise cleared 


Z— zero condition code bit 
Set if the result equals zero; otherwise cleared 


V— overflow condition code bit 


Set if an arithmetic overflow occurs implying that the result cannot be represented in the 
operand size; otherwise cleared 





C— carry condition code bit 


Set if a carryout of the operand MSB occurs for an addition, or if a borrow occurs in a 
subtraction; otherwise cleared 


Set to the value of the C-bit for arithmetic operations; otherwise not affected. 


3.2.2 Supervisor Programming Model 


Only system programmers use the supervisor programming model to implement sensitive 
operating system functions, I/O control, and memory management. All accesses that affect 
the control features of ColdFire 5200 processors are in the supervisor programming model, 
which consists of the registers available to users as well as the following control registers: 


e 16-bit status register (SR) 
e 32-bit vector base register (VBR) 


31 20 19 0 
| | MUST BE ZEROS | VBR VECTOR BASE REGISTER 
15 8 7 0 
System Byte CCR SR STATUS REGISTER 


Supervisor Programming Model 


Additional registers may be supported on a part-by-part basis. 
The following paragraphs describe the supervisor programming model registers. 


3.2.2.1 STATUS REGISTER. The SR stores the processor status and includes the CCR, 
the interrupt priority mask, and other control bits. In the supervisor mode, software can 
access the entire SR. In user mode, only the lower 8 bits are accessible (CCR). The control 
bits indicate the following states for the processor: trace mode (T-bit), supervisor or user 
mode (S-bit), and master or interrupt state (M). 
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Special Note: After a reset exception, the contents of the status register are $27xx. 


SYSTEM BYTE CONDITION CODE REGISTER (CCR) 
1 ~ 14 = 12 11. = =10 8 6 5 + 3 : - 





ee Register 


T— trace enable 
When set, the processor will perform a trace exception after every instruction. 


S— supervisor / user state 
Denotes whether the processor is in supervisor mode (S=1) or user mode (S=0). 


M-— master / interrupt state 


This bit is cleared by an interrupt exception, and can be set by software during execution of 
the RTE or move to SR instructions. 


\[2:0]— interrupt priority mask 

Defines the current interrupt priority. Interrupt requests are inhibited for all priority levels less 
than or equal to the current priority, except the edge-sensitive level 7 request, which cannot 
be masked. 


3.2.2.2 VECTOR BASE REGISTER (VBR). The VBR contains the base address of the 
exception vector table in memory. The displacement of an exception vector is added to the 
value in this register to access the vector table. The lower 20 bits of the VBR are not 
implemented by ColdFire 5200 processors; they are assumed to be zero, forcing the table 
to be aligned on a 1 Mbyte boundary. 


3.2.3 MAC Programming Model 


Figure 3-6 illustrates the MAC portion of the user programming model available on the 
MCF5307 microprocessor core. It consists of the following registers: 


e 32-bit accumulator (ACC) 
e 16-bit mask register (MASK) 
e 8-bit MAC status register (MACSR) 


The instructions which reference the MAC registers always transfer 32 bits of data, 
regardless of the implemented size of the register. 


31° : 16. 15 8 7 0 
Accumulator (ACC) 
Mask Register (MASK) 
MAC Status Register (MACSR) 


Figure 3-6. MAC Unit User Programming Model 
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3.2.3.1 ACCUMULATOR (ACC). This is a 32-bit general-purpose register used to 
accumulate the results of MAC operations. 


3.2.3.2 MASK REGISTER (MASK). This is a 16-bit general-purpose register for use as an 
optional address mask during MAC instructions which fetch operands from memory. It is 
useful in the implementation of circular queues in operand memory. 


3.2.3.3 MAC STATUS REGISTER (MACSR). This is an 8-bit special-purpose register 
which defines the operating configuration of the MAC unit, and contains indicator flags from 
the results of MAC instructions. 


The ColdFire processors provide a simplified exception processing model. The next 
subsection details the model. 


3.3 EXCEPTION PROCESSING OVERVIEW 


Exception processing for ColdFire processors is streamlined for performance. Differences 
from previous M68000 Family processors include: 


e A simplified exception vector table 

e Reduced relocation capabilities using the vector base register 
e A single exception stack frame format 

e Use of a single, self-aligning system stack pointer 


ColdFire processors use an instruction restart exception model but do require more software 
support to recover from certain access errors. See subsection 3.5.1 Access Error 
Exception for details. 


Exception processing is comprised of four major steps and can be defined as the time from 
the detection of the fault condition until the fetch of the first handler instruction has been 
initiated. 


First, the processor makes an internal copy of the SR and then enters supervisor mode by 
setting the S-bit and disabling trace mode by clearing the T-bit. The occurrence of an 
interrupt exception also forces the M-bit to be cleared and the interrupt priority mask to be 
set to the level of the current interrupt request. 


Second, the processor determines the exception vector number. For all faults except 
interrupts, the processor performs this calculation based on the exception type. For 
interrupts, the processor performs an interrupt-acknowledge (IACK) bus cycle to obtain the 
vector number from a peripheral device. The [ACK cycle is mapped to a special 
acknowledge address space with the interrupt level encoded in the address. 


Third, the processor saves the current context by creating an exception stack frame on the 
system stack. ColdFire processors support a single stack pointer in the A7 address register; 
therefore, there is no notion of Separate supervisor or user stack pointers. As a result, the 
exception stack frame is created at a O-modulo-4 address on the top of the current system 
stack. Additionally, the processor uses a simplified fixed-length stack frame for all 
exceptions. The exception type determines whether the program counter placed in the 
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exception stack frame defines the location of the faulting instruction (fault) or the address of 
the next instruction to be executed (next). 


Fourth, the processor acquires the address of the first instruction of the exception handler. 
By definition, the exception vector table is aligned on a 1 MByte boundary. This instruction 
address is obtained by fetching a value from the table located at the address defined in the 
vector base register. The index into the exception table is calculated as (4 x vector_number). 
Once the index value has been generated, the contents of the vector table determine the 
address of the first instruction of the desired handler. After the instruction fetch for the first 
opcode of the handler has been initiated, exception Riccesend terminates and normal 
instruction processing continues in the handler. 


ColdFire processors support a 1024-byte vector table aligned on any 1 MByte address 
boundary (see Table 3-1). The table contains 256 exception vectors where the first 64 are 
defined by Motorola and the remaining 192 are user-defined interrupt vectors. 
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Table 3-1. Exception Vector Assignments 
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“Fault” refers to the PC of the instruction that caused the exception 
“Next” refers to the PC of the next instruction that follows the instruction that caused the fault. 


ColdFire processors inhibit sampling for interrupts during the first instruction of all exception 
handlers. This allows any handler to effectively disable interrupts, if necessary, by raising 
the interrupt mask level contained in the status register. 


3.4 EXCEPTION STACK FRAME DEFINITION 


The exception stack frame is shown in Figure 3-7. The first longword of the exception stack 
frame contains the 16-bit format/vector word (F/V) and the 16-bit status register. The second 
longword contains the 32-bit program counter address. 


PROGRAM COUNTER[31:0] 


31 27 25 417 15 0 
FORMAT |FS[3:2]} VECTORI7:0] | FS[1:0]] STATUSREGISTER 





Figure 3-7. Exception Stack Frame Form 


The 16-bit format/vector word contains 3 unique fields: 


e A 4-bit format field at the top of the system stack is always written with a value of 
{4,5,6,7} by the processor indicating a two-longword frame format. See Table 3-2. This 
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field records any longword misalignment of the stack pointer which might have existed 
at the time the exception occurred. | , | 


Table 3-2. Format Field Encoding 


ORIGINAL A7 @ TIME A7 @ 1ST | 
3 INSTRUCTION OF sai ei Seiad 


OF EXCEPTION, BITS 
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Original A7 - 10 0110 
Original A7 - 11 0111 | 


e A 4-bit fault status field, FS[3:0], at the top of the system stack. This field is defined for 
access and address errors only and written as zeros for all other types of exceptions. 
See Table 3-3. , 


= 


Table 3-3. Fault Status Encodings 


[ese —_oernron 
| [em renee 
[o00 | Erne 


[sen 
space 
* Error on operand read 
| _ Reserved | 


Reserved 


¢ The 8-bit vector number, vector[7:0], defines the exception type and is calculated by the 
processor for all internal faults and represents the value supplied by the peripheral in 
the case of an interrupt. Refer to Table 3-1. | 


3.5 PROCESSOR EXCEPTIONS 















3.5.1 Access Error Exception 


For the MCF5307 processor, access errors are only reported in conjunction with an 
attempted store to a write-protected memory space. Thus, access errors associated with 
instruction fetch or operand read accesses are not possible. 
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The exact processor response to an access error depends on the type of memory reference 
being performed. For an instruction fetch, the processor postpones the error reporting until 
the faulted reference is needed by an instruction for execution. Therefore, faults that occur 
during instruction prefetches that are then followed by a change of instruction flow does not 
generate an exception. When the processor attempts to execute an instruction with a faulted 
opword and/or extension words, the access error signaled, and the instruction aborted. For 
this type of exception, the programming model has not been altered by the instruction 
generating the access error. 


If the access error occurs On an operand read, the processor immediately aborts the current 
instruction’s execution and initiates exception processing. In this situation, any address 

register updates attributable to the auto-addressing modes, {e.g., (An)+,-(An)}, has already 
been performed. So, the programming model contains the updated An value. In addition, if 
an access error occurs during the execution of a MOVEM instruction loading from memory, 
any registers already updated before the fault occurs contains the operands from memory. 


The ColdFire processor uses an imprecise reporting mechanism for access errors on 
operand writes. Because the actual write cycle may be decoupled from the processor's 
issuing of the operation, the signaling of an access error appears to be decoupled from the 
instruction that generated the write. Accordingly, the PC contained in the exception stack 
frame merely represents the location in the program when the access error was signaled. 
All programming model updates associated with the write instruction are completed. The 
NOP instruction can collect access errors for writes. This instruction delays its execution 
until all previous operations, including all pending write operations, are complete. If any 
previous write terminates with an access error, it is guaranteed to be reported on the NOP 
instruction. 


3.5.2 Address Error Exception 


Any attempted execution transferring control to an odd instruction address (i.e., if bit O of the 
target address is set) results in an address error exception. 


Any attempted use of a word-sized index register (Xi.w) or a scale factor of 8 on an indexed 
effective addressing mode generates an address error as does an attempted execution of 
an instruction with a full-format indexed addressing mode. 


3.5.3 Illegal Instruction Exception 


On the Version 2 ColdFire microprocessor implementation, only certain illegal opcodes were 
decoded and generated an illegal instruction exception. However, the Version 3 processor 
decodes the full 16-bit opcode and generates an illegal instruction exception if the execution 
of any non-supported instruction is attempted. Additionally, if execution of any illegal line A 
or line F opcode is attempted, unique exception pes are genelaer: vector numbers 10 and 
11, respectively. 


ColdFire processors do not provide illegal instruction detection on the extension words on 
any instruction, including MOVEC. If execution of instruction with an illegal extension word 
is attempted, the resulting operation is undefined. 
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3.5.4 Privilege Violation 


The attempted execution of a supervisor mode instruction while in user mode generates a 
privilege violation exception. See the ColdFire Family Programmer’s Reference Manual Rev 
1.0 for lists of supervisor- and user-mode instructions. - 3 


3.5.5 Trace Exception 


To aid in program development, the ColdFire processors provide an instruction-by- 
instruction tracing capability. While in trace mode, indicated by the assertion of the T-bit in 
the status register (SR[15] = 1), the completion of an instruction execution signals a trace 
exception. This functionality allows a debugger to monitor program execution. 


The single exception to this definition is the STOP instruction. When the STOP opcode is 
executed, the processor core waits until an unmasked interrupt request is asserted, then 
aborts the pipeline and initiates interrupt exception processing. 


Because ColdFire processors do not support any hardware stacking of multiple exceptions, 
it is the responsibility of the operating system to check for trace mode after processing other 
exception types. As an example, consider the execution of a TRAP instruction while in trace 
mode. The processor initiates the TRAP exception and then pass control to the 
corresponding handler. If the system requires that a trace exception be processed, it is the 
responsibility of the TRAP exception handler to check for this condition (SR[15] in the 
exception stack frame asserted) and pass control to the trace handler before returning from 
the original exception. 


3.5.6 Debug Interrupt 


This special type of program interrupt is discussed in detail in Section 16 Debug Support. 
This exception is generated in response to a hardware breakpoint register trigger. The 
processor does not generate an IACK cycle but rather calculates the vector number 
internally (vector number 12). Additionally, the M-bit and the interrupt priority mask fields of 
the status register are unaffected by the occurrence of a debug interrupt. 


3.5./ RTE and Format Error Exceptions 


When an RTE instruction is executed, the processor first examines the 4-bit format field to 
validate the frame type. For a ColdFire processor, any attempted execution of an RTE where 
the format is not equal to {4,5,6,7} generates a format error. The exception stack frame for 
the format error is created without disturbing the original i frame and the stacked 

PC points to the RTE instruction. 


The selection of the format value siovides some limited debug support for porting code from 
68000 applications. On M68000 Family processors, the SR was located at the top of the 
stack. On those processors, bit[30] of the longword addressed by the system stack pointer 
is typically zero. Thus, if an RTE is attempted using this as01: format, it generates a format 
error on a ColdFire processor. , 


Ifthe format field defines a valid type, the processor: (1) reloads the SR operand, (2) fetches 
the second longword operand, (3) adjusts the stack pointer by adding the format value to 
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the auto-incremented address after the fetch of the first longword, and then (4) transfers 
control to the instruction address defined by the second longword operand within the stack 
frame. 


3.5.8 TRAP Instruction Exceptions 


The TRAP #n instruction always forces an exception as part of its execution and is useful 
for implementing system calls. The trap instruction may be used to change from the user to 
supervisor mode. 


3.5.9 Interrupt Exception 


The interrupt exception processing, with interrupt recognition and vector fetching, includes 
uninitialized and spurious interrupts as well as those where the requesting device supplies 
the 8-bit interrupt vector. Autovectoring may optionally be supported through the System 
Integration module (SIM). 


3.5.10 Fault-on-Fault Halt 


If a ColdFire processor encounters any type of fault during the exception processing of 
another fault, the processor immediately halts execution with the catastrophic “fault-on-fault” 
condition. A reset is required to force the processor to exit this halted state. 


3.5.11 Reset Exception 


Asserting the reset input signal to the processor causes a reset exception. The reset 
exception has the highest priority of any exception; it provides for system initialization and 
recovery from catastrophic failure. Reset also aborts any processing in progress when the 
reset input is recognized. Processing cannot be recovered. 


The reset exception places the processor in the supervisor mode by setting the S-bit and 
disables tracing by clearing the T-bit in the SR. This exception also clears the M-bit and sets 
the processor’s interrupt priority mask in the SR to the highest level (level 7). Next, the VBR 
is initialized to zero (600000000). The control registers specifying the operation of any 
memories (e.g., cache and/or RAM modules) connected directly to the processor are 
disabled. 


Note 


Other implementation-specific supervisor registers are also 
affected. Refer to each of the modules in this user’s manual for 
details on these registers. 


Once the processor is granted the bus and it does not detect any other alternate masters 
taking the bus, the core then performs two longword read bus cycles. The first longword at 
address 0 is loaded into the stack pointer and the second longword at address 4 is loaded 
into the program counter. After the initial instruction is fetched from memory, program 
execution begins at the address in the PC. If an access error or address error occurs before 
the first instruction is executed, the processor enters the fault-on-fault halted state. 
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3.6 INTEGER DATA FORMATS 


Table 3-4 lists the integer operand data formats. Integer operands can reside in registers, 
memory, or instructions. The operand size for each instruction is either explicitly encoded in 
the instruction or implicitly defined by the instruction operation. | 


Table 3-4. Integer Data Formats 
OPERAND DATA FORMAT | SIZE | 


Bit 1 Bit 
Byte Integer 8 Bits 
Word Integer 16 Bits | 


longword Integer 32 Bits 



















3.7 ORGANIZATION OF DATA IN REGISTERS 


The following paragraphs describe data organization within the data, address, and control 
registers. 


3.7.1 Organization of Integer Data Formats in Registers 


Figure 3-8 shows the integer format for data registers. Each integer data register is 32 bits 
wide. Byte and word operands occupy the lower 8- and 16-bit portions of integer data 
registers, respectively. longword operands occupy the entire 32 bits of integer data 
registers. A data register that is either a source or destination operand only uses or changes 
the appropriate lower 8 or 16 bits in byte or word operations, respectively. The remaining 
high-order portion does not change. The least significant bit (LSB) of all integer sizes is zero, 
the most significant bit (MSB) of a longword integer is 31, the MSB of a word integer is 15, 
and the MSB of a byte integer is 7. 


31. 30 1 0 
<< BIT (0 < MODULO (OFFSET) 
< 31,OFFSET OF 0 = MSB) 


rc 
WM 
w 


3f 


7 0 
0 


31 15 
NOT USED MSB LOW-ORDER WORD LSB | 16-BIT WORD 
31 0 
MSB LONG WORD : LSB | LONG WORD 


Figure 3-8. Organization of Integer Data Formats in Data Registers 


Because address registers and stack pointers are 32-bits wide, address registers cannot be 
used for byte-size operands. When an address register is a source operand, either the low- 
order word or the entire longword operand is used, depending on the operation size. When 
an address register is used, the entire register is affected, regardless of the operation size. 
If the source operand is a word size, it is sign-extended to 32 bits and then used in the 

operation to an address register destination. Address registers are primarily for addresses 
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and address computation support. Figure 3-9 illustrates the integer format for address 
registers. 


31 16 15 0 
SIGN-EXTENDED 16-BIT ADDRESS OPERAND 
31 0 


FULL 32-BIT ADDRESS OPERAND 


Figure 3-9. Organization of Integer Data Formats in Address Registers 


Control registers vary in size according to function. Some control registers have undefined 
bits reserved for future definition by Motorola. Those particular bits read as zeros and must 
be written as zeros for future compatibility. 


All operations to the SR and CCR are word-size operations. For all CCR operations, the 
upper byte is read as all zeros and is ignored when written, despite privilege mode. 


3.7.2 Organization of Integer Data Formats in Memory 


All ColdFire processors use a big-endian addressing scheme. The byte-addressable 
organization of memory allows lower addresses to correspond to higher order bytes. The 
address N of a longword data item corresponds to the address of the high order word. The 
lower order word is located at address N + 2. The address N of a word data item 
corresponds to the address of the high order byte. The lower order byte is located at address 
N + 1. This organization is shown in Figure 3-10. 
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LONG WORD $00000000 
WORD $00000000 WORD $00000002 


BYTE $00000000 BYTE $00000001 BYTE $00000002 BYTE $00000003 
LONG WORD $00000004 


WORD $00000004 WORD $00000006 


BYTE $00000004 BYTE $00000005 _ BYTE $00000006 BYTE $00000007 


LONG WORD $FFFFFFFC 


WORD $EFFFFEFC WORD $FFFFFFFE 


BYTE $FFFFFFFC BYTE $FFFFFFFD BYTE $FFFFFFFE BYTE $FFFFFFFF 





Figure 3-10. Memory Operand Addressing 


3.8 ADDRESSING MODE SUMMARY 


The addressing modes are grouped into categories according to the mode of use. Data 
addressing modes refer to data operands. Memory addressing modes refer to memory 
operands. Alterable addressing modes refer to alterable (writable) operands. Control 
addressing modes refer to memory operands without an associated size. 


These categories sometimes combine to form new categories that are more restrictive. Two 
combined classifications are alterable memory (both alterable and memory) and data 
alterable (both alterable and data). Table 3-5 lists a summary of effective addressing modes 
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and their categories. Twelve of the most commonly used addressing modes from the | 
MM68000 Family are available on ColdFire microprocessors. | 


Table 3-5. Effective Addressing Modes and Categories 


MODE) REG. CATEGORY 
ADDRESSING MODES AX 
et FIELD| FIELD | DATA] MEMORY| CONTROL| ALTERABLE 
Register Direct 
Data Dn 
Address An 


Register Indirect 
Address 
Address with Postincrement 
Address with Predecrement 
Address with Displacement (dig, An) 


Address Register Indirect with Index 
8-Bit Displacement (dg, An, Xi) | 110 |reg.no.| X 
Program Counter Indirect 
with Displacement (dig, P 111 010 Xx X X 
Program Counter Indirect with Index 
8-Bit Displacement (dg, PC, Xi) | 111 011 X X X 


































Absolute Data Addressing 
Short (xXx) 


C) 
w |} 111 | 000 | X 
L 111 | 001 X 


X X 
Long (XXX) X ss 
A 


3.9 INSTRUCTION SET SUMMARY 


Table 3-6 lists the notational conventions used throughout this manual unless otherwise 
specified. Table 3-7 lists the 5307 microprocessor core instruction set by opcode. This 
instruction set is a reduced version of the 68000 instruction set. The removed instructions 
include BCD, bit field, logical rotate, decrement and branch, integer division, and integer 
multiply with a 64-bit result. In addition, nine new MAC instructions have been added. 


Table 3-6. Notational Conventions 


















































OPCODE WILDCARDS 
CC | Logical Condition (example: NE for not equal) 
| REGISTER OPERANDS 
An Any Address Register n (example: A3 is address register 3) 
i Ax, Ay Source and destination address registers, respectively 
Dn Any Data Register n (example: D5 is data register 5) 
r Dx,Dy Source and destination data registers, respectively 
f. Rn Any Address or Data Register 
| Rx,Ry Any source and destination registers, respectively 
| Rw Any second source register 
Re Any Control Register (example VBR is the vector base register) 
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Table 3-6. Notational Conventions (Continued) 


REGISTER/PORT NAMES 

ACC _ _ ..MAC Accumulator ) 
DDATA ns Debug Data Port 

CCR Condition Code Register (lower byte of status register) 
MACSR 3 MAC Status Register 

MASK | Mask Register 
| Program Counter 
PST Processor Status Port 
Status Register 


MISCELLANEOUS OPERANDS 
Immediate data following the instruction word(s). 
<ea> Effective Address 
<label> Assembly Program Label 
<list> List of registers (example: D3—DO) 
<size> Operand data size: Byte (B), Word (W), Longword (L) 


OPERATIONS 
Arithmetic addition or postincrement indicator 
Arithmetic subtraction or predecrement indicator 
Arithmetic multiplication 
Invert; operand is logically complemented 
Logical AND 
Logical OR 
Logical exclusive OR 
Shift left (example: DO << 3 is shift DO left 3 bits) 
Shift right (example: DO >> 3 is shift DO right 3 bits) 
_ ‘Source operand is moved to destination operand 
-. Two operands are exchanged 
sign-extended | All bits of the upper portion are made equal to the high-order bit of the lower portion 


If <condition> Test the condition. If true, the operations after ‘then’ are performed. If the condition is false and the 
then <operations> _joptional ‘else’ clause is present, the operations after ‘else’ are performed. If the condition is false and 
else <operations> [else is omitted, the instruction performs no operator: Refer to the Bcc instruction description as an 

example. 


SUBFIELDS:AND QUALIFIERS 
- Optional Operation 
Identifies an indirect address 
Displacement Value, n-Bits Wide (example: dj, is a 16-bit displacement) 
Address : Calculated Effective Address (pointer) 
Bit Bit Selection (example: Bit 3 of DO) 
Least Significant Bit (example: MSB of DO) 
Least Significant Word 
- Most Significant Bit 
Most Significant Word 


- CONDITION CODE REGISTER BIT NAMES 
Branch Prediction Bit in CCR 
Carry Bit in CCR 
Negative Bit in CCR 
Overflow Bit in CCR 
Extend Bit in CCR 
Zero Bit in CCR 


vu 
© 


#<data> 


A 
A 


Vv 
Vv 





ome | ey 


Ci 
ee ow 


= 
D 
= 


Ww 
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Table 3-6. Notational Conventions (Continued) 


Branch Prediction Bit in CCR 
Carry Bit in CCR 
Negative Bit in CCR 
Overflow Bit in CCR 
Extend Bit in CCR 
Zero Bit in CCR 


Table 3-7. Instruction Set Summary 


INSTRUCTION |OPERAND SYNTAX) OPERAND SIZE OPERATION 


















































Ny] <| <<] 2) OO! U0 


















































































































































Dy,<ea>x 32 Source + Destination > Destination 
ADD 
<ea>y,Dx 32 | 
ADDA <ea>y,Ax = 32 Source + Destination > Destination 
| ADDI #<data>,Dx 32 : Immediate Data + Destination — Destination 
ADDQ #<data>,<ea>x “al 32 Immediate Data + Destination — Destination 
ADDX Dy,Dx ie 32 | Source + Destination + X — Destination 
[ 
AND Dy,<ea>x 32 Source & Destination — Destination 
<ea>y,Dx 32 ai 
ANDI #<data>,Dx 32 Immediate Data & Destination — Destination 
#<data>,Dx 32 X/C < (Dy << #<data>) — 0 
ASR Dx,Dy 32 MSB = (Dy >> Dx) > X/C 
<data>,Dx 32 MSB - (Dy >> #<data>) — X/C 
Bec <label> 8,16 If Condition True, Then PC + d, — PC 
BCHG Dy ,<ea>x 8,32 ~(<Bit Number> of Destination) > Z, 
#<data>,<ea>x 8,32 Bit of Destination 
BCLR Dy,<ea>x 8,32 ~( <Bit Number> of Destination) — Z; 
#<data>,<ea>x 8,32 0 —> Bit of Destination 
BRA <label> =e 8,16 PC +d, > PC 
BSET Dy,<ea>x 8,32 ~(<Bit Number> of Destination) > Z; 
#<data>,<ea>x 8,32 1— Bit of Destination 
BSR <label> 8,16 “i SP — 4 > SP; PC- (SP); PC +d, — PC 
Dy ,<ea>x 8,32 ~(<Bit Number> of Destination) > Z 
BIST ie datas eax ih 8,32 L ( 
CLR <ea>X 8,16,32 [ 0 — Destination 
= CMPI #<data>,Dx | 32 Destination — Immediate Data 
CMP <ea>y,Dx Hl 32 S| Destination — Source 
CMPA <ea>y,Ax EZ 32 Destination - Source 
CPUSH (An) | 32 | Push and Invalidate Cache Line 
16 <ea>y — Dx {16-bit Remainder; 16-bit Quotient} 
DIVS <ea>y,Dx 30 <ea>y — Dx {32-bit Quotient} 
i Note: signed operation 
<ea>y — Dx {16-bit Remainder; 16-bit Quotient} 
DIVU <ea>y,Dx 16 <ea>y > Dx { 32-bit Quotient} 
a L Note: unsigned operation 
EOR Dy,<ea>x 32 | Source ~ Destination — Destination 
Z EORI #<data>,Dx ' 32 Immediate Data ~ Destination — Destination 
EXT = ae Sign-Extended Destination — Destination 
EXTB Dx 8 > 32 Sign-Extended Destination — Destination 
HALT none none Enter Halted State 
| JMP <@a> none Address of <ea> PC 
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INSTRUCTION 


LINK 


- 
in| @ 
i | 
DJiv2 
<|t< 
>< 


- 
2) 
ee 


a 
ep 
we) 


MAC 


MACL 


MOVE . 
MOVE from ACC 


MOVE from CCR 


MOVE from MASK 
MOVE from SR 


MOVE to ACC 


MOVE to CCR 


MOVE to MACSR 


MOVE to MASK 


MOVE to SR 


MOVEA 
MOVEC 


MOVEM 
MOVEQ 
MSAC 


MSACL 


MULS 


Table 3-7. Instruction Set Summary (Continued) 


OPERAND SYNTA 
<ea> 
<ea>y,Ax 
Ax,#<data> 


X, 
#<data>,Dx 


X, 
#<data>,Dx 


Rw,Rx, <shift> 


#<data>,Dx 
Rw,Rx,<shift> 


Rw,Rx,<shift>,<ea>, 





OPERAND SIZE OPERATION 
| none SP— 4 > SP; PC > (SP); <ea> — PC 
SP — 4 — SP; Ax > (SP); SP > Ax; SP + d16 > SP 
32 X/C <— (Dy << Dx) << 0 
32 X/C < (Dx << #<data>) < 0 
32 ? 0 — (Dy >> Dx) > X/C 
32 0 > (Dx >> #<data>) — X/C 


16 x 16+ 32 > 32 







8 > 32 


32 - 16 x 16 > 32 
32 - 32 x 32 > 32 


32-16 x 16 > 32 
2-32x 32 > 32 


32 x 32 +32 > 32 
Rw,Rx,<shift>,<ea>,/16 x 16+ 32 > 32 
Ry 32 x 32 + 32 — 32 
816,92 
ACCA 
a ee eee ee 
MACSR,Rx 32 
-MACSR,CCR 8 
MASK AX 
OR le Ie 
Rx,ACC<#<da- 32 
ta>,ACC 32 
Dn,;CCR,#<da- 16 
ta>,CCR 
Rn,MACSR 30 
#<data>,MACSR 
Rn,MASK 3 
#<data>,MASK 32 
Dy,SR 16 
#<data>,SR 
16,92 5 92 
— list,<ea>x 32 
_<ea>y,list 32 


| <ea>y,Dx 


16 x 16 > 32 
32 x 32 - 32 


ACC + (Rw x Rx){ << 11 >> 1} — ACC 
ACC + (Rw x Rx){ << 1 | >> u — ACC; (<ea>{&MASK}) > 
y | 


<eal> — <ea2> 
ACC —> Rx 
CCR => Dx 


MACSR —> Rx 
MACSR CCR 


MASK —> Rx 
SR — Destination 


Rx —~ACC 
#<data> > ACC 
Dn —CCR 
#<data> > CCR 
Rn —MACSR 
#<data> — MACSR 


Rn >~MASK 
#<data> — MASK 


oO 








Source > SR 


Source — Destination 
Rn — Re 


Listed Registers — Destination 
Source — Listed Registers 


Sign-extended Immediate Data— Destination 
ACC - (Rw x Rx){ << 11 >> 1} SF — ACC 
ACC - (Rw x Rx){ << 1 | >> ee — ACC; (<ea>{&MASK}) 
> hy 





NO 





















Source x Destination — Destination 
Signed or unsigned 


Source x Destination — Destination 
Signed or unsigned 








MULU <ea>y,DI Bs . ae = aS 
a e 
NEGX <oox 
NOT 
Dy,<ea>x 
oR SSB 
oR] Feet, | 
PULSE [none [tone 


(ee) 


-24 









0 — Destination > Destination 
0 — Destination— X —> Destination 
PC + 2 — PC; Sync Pipeline 


~ Destination — Destination 


Source | Destination > Destination 


Immediate Data | Destination — Destination 
SP — 4 > SP; Address of <ea> > (SP) 














Set PST= $4 





<ea>y — Dx {32-bit Remainder} 
Note: Signed operation 


<ea>y — Dx {32-bit Remainder} 
Note: Unsigned operation 
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Table 3-7. Instruction Set Summary (Continued) 







































































































INSTRUCTION |OPERAND SYNTAX! OPERAND SIZE OPERATION 
RTE FS none | none (SP+2) SR; (SP+4) PC; SP+ 8 — PC 
RTS none | none (SP) >PC; SP +4— SP 
Soc Dx 8 If See ue hier peninalon, 
P _ STOP #<data> 16 Immediate Data -SR; Enter Stopped State 
SUB Dy,<ea>x 32 Destination - Source— Destination 
<ea>y,Dx 32 
SUBA | <ea>,Ax 32 Destination - Source— Destination 
~ SUBI #<data>,Dx — 3go Destination — Immediate Data — Destination 
SUBQ #<data>,<ea>x ce 32 Destination - Immediate data —> Destination 
SUBX | Dy,Dx 32 Destination — Source — X — Destination 
a SWAP i Dn _| 16 ~ MSW of Dn <> LSW of Dn 








SP — 2 > SP:SR = (SP); 
TRAP none Nene SP — 2 — SP; Format — (SP); 
| Vector Address > P 


SP — 4 > SP;PC > (SP 























] none PC + 2 PC: 
TRAPF ie done 16 PC + 4 > PC; 
en 32 PC + 6- PC 
TST <ea>y 4 8,16,32 Set Integer Condition Codes 
UNLK Ax 32 Ax SP; (SP) — Ax; SP + 4 SP 
WDDATA | <ea> 8,16,32 <ea> —DDATA port 
WDEBUG <ea> 16 <ea> — Debug Module 








3.9.1 Timing Assumptions 
For the timing data presented in this section, the following assumptions apply: 


1. The operand execution pipeline (OEP) is loaded with the opword and all required ex- 
tension words at the beginning of each instruction execution. This implies that the OEP 
does not wait for the instruction fetch pipeline (IFP) to supply opwords and/or exten- 
sion words. 


2. The OEP does not experience any sequence-related pipeline stalls. For Version 2 and 
Version 3 ColdFire processors, the most common example of this type of stall involves 
consecutive store operations, excluding the MOVEM instruction. For all STORE oper- 
ations (except MOVEM), certain hardware resources within the processor are marked 
as “busy” for two clock cycles after the final DSOC cycle of the store instruction. If a 
subsequent STORE instruction is encountered within this 2-cycle window, it is stalled 
until the resource again becomes available. Thus, the maximum pipeline stall involving 
consecutive STORE operations is 2 cycles. The MOVEM instruction uses a different 
set of resources and this stall does not apply. 


3. The OEP completes all memory accesses without any stall conditions caused by the 
memory itself. Thus, the timing details provided in this section assume that an infinite 
zero-wait state memory is attached to the processor core. 


4. All operand data accesses are aligned on the same byte boundary as the operand 
size, i.e., 16-bit operands aligned on O-modulo-2 addresses, 32-bit operands aligned 
on 0-modulo-4 addresses. 
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If the operand alignment fails these guidelines, it is misaligned. The processor core 
decomposes the misaligned operand reference into a series of aligned accesses as shown 
in Table 3-8. . 


Table 3-8. Misaligned Operand References | 


: _ BUS | ADDITIONAL 
ApPreS ste size OPERATIONS C(R/W) 
2(1/0) if read 
Byte, Word, 3(2/0) if read 
2(1/0) if read 


3.9.2 MOVE Instruction Execution Times 


The execution times for the MOVE.{B,W} instructions are shown in Table 3-9, while Table 
3-10 provides the timing for MOVE.L. 













For all tables in this section, the execution time of any instruction using the PC-relative 
effective addressing modes is the same for the comparable An-relative mode. 


The nomenclature “xxx.wl” refers to both forms of absolute addressing, xxx.w and xxx.I. 


Table 3-9. MOVE Byte and Word Execution Times 
DESTINATION 


accel cont San ne oe oa Ue 





















7) 
eAvXrsFy| (v0) | samy [samy | aay) | — 
Pew | ao) AGA) | atin) | ay | 
| 7 
Oy aay] 






ac) 
Bin) | sch) | 80) | — 
‘(or0) [20m _208) | a0ony | — 


Table 3-10. MOVE Long Execution Times 


| | DESTINATION 
eee me Oe A) _[ GR XESF) 


5y r(O7) 
Ay 1(07) 
( 
( 




















~—— 
~—”* 


— 
— 


1( ) 
(ay) a 
Ay s(t 3(tf) 
ay s(ir 3(i7) 
(G6.Ay) sin) | — 





eee” | ee” 
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Table 3-10. MOVE Long Execution Times (Continued) 


DESTINATION 


URCE 
cee Re) A) 6A) [BAK XPSA[ p00 


(@8,PC.XPSF 


The following table specifies the execution times for the Move Long instructions accessing 
the program-visible registers of the MAC unit. 





Table 3-11. MAC MOVE Long Instruction Execution Times 


EFFECTIVE ADDRESS 
3(0/ 
3(0/ 
MASK,Rx 


3.10 STANDARD ONE OPERAND INSTRUCTION EXECUTION TIMES 


Table 3-12. One Operand Instruction Execution Times 
- EFFECTIVE ADDRESS 


ercooe| >| aye | Ge | | ee 

















1(0/0) act) | 01) | 
Fa Pe ee ee 
BS Fa ee cc i ee ee 
MOO) NS 5 Fe ee Sl oe ei ee ee a , eed 
ee Ie CO) It er ee a Se) eS 
ie SOOT Si ORO Eee ee ee ee 
sea 2 1 De a ee el ee 
ee ee OO ae ee ee 
FS Oe ee ee 
4(v/0)_ | 4(1/0) 

: 


3(1) 
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3.11 STANDARD TWO OPERAND INSTRUCTION EXECUTION TIMES 


Table 3-13. Two Operand Instruction Execution Times 
EFFECTIVE ADDRESS 


OPCODE| <EA> (d16,An) | (d8,An,Xi*SF) 
A A - 
Joreooe| am me [aw [ow | (d16,PC) | (d8,PC,Xi*SF) 


[aaa [<eas.Rix | 10/0) | Avo) | atmo) | avo) | avo) | Scio) | 470) | 11070) 


[addi [y.cos | — | 4am) | acny | acm) | aan) [scm | aan) | — | 
addi [Hmm ox[ Tom | — | — | — | — [| — | — |— | 
[aia Fimm.<easl 11010) | 4am) | aay | acm) | acm) | samy) [ aA) | 
we yo OO = Se ee | 
(andi | <eas,Ax| 11010) [4am | avo) | aco) | aco | 50) | AO) | 100) 
[anit | Dy.cos[— | aga) | atin | acim) [amy scm) [anny | — | 
andi [¥imm.ox[ im | — | — |-— |— | — | — | —~ 
[asi | <eas,0x[ 100) | — | — | — [-— [| — | _— | 100 
(esti [<ea>,Ox | 1000) [| — | — |= |= | _] 70 
beh | Dy.c0a> | 2100) | sam) | scm) | scm) | sam) | eam) | samy | — | 
beh [Fimm,<eas] 21010) | samy | sci) | scm) | sam) | — | — | — 
[bar | Dy.coas | 2100) | sam) | sim) | scm) | scm) | ecm) | samy | — | 
bor [rim <oasl 2100) [samy | sci) | scm) | sam) | — | — | — 
[bse] Dy.ceas | 2(0/0 | —5t0m)_[ 8G) [samy | samy | eam) | 8am) | — 
[beet |Fimm,<eas] 21070) | samy | sci) | scm) | sam) | — | — | — 
[bist] Dy.coas | 1100) | 4170) | attroy | acto) | att) 5co) | ao) | — | 
[bist [Fimm,<oas] 1101) | 4470) | ato | atty | atm [| — | — | —_ 
(00 
—ampit | ¥immDx| voy | — | — | — | — |. — [| —_ 

20(0/0 
35(010) | 35(1/0) | 35(t/0) | s5(q/0) | aq) | _— | — | — 
[diva | <ea>,0x | 35(000) | 35(4/0) | s5(t/0) | 35(t70) | a5) | _— | — | —_ 
[cock | Dy.cea | 1100) | aa) | atimy) [acm | acm) | 50m) | acy | — 
[—eott | #immox| soo | — | — | — | — | — | — [| —_ 
[tea [<easax| — | 100 | — | — | 100 | 20m) | 100 | —_ 
[wit [eearx| tom [| — | — | — | — | — | — | 70m) 
[et [<easOx 10m | — | — | — | — [| — | _— | 1009 
ee ee ee es 
[mact | Ry.Fx | 300) | — |---| — | — [= | — | — J 
Tmsscw | Fyre | too | — | — | — | — [| — | — [—— 
[msec | Fy.rx | 30) | — | — | — | — | — | — | —_ 
j_macw FURBO — | avo) | avo | avy | am | | = | | 
macs PROM — | aco) | sim | sev | sm | - | - | = | 
j_msacw RRO — | avo) | stv | avy | am | — | — | — | 
j_msacs URGE — | coy | stv | ivy | sam | — | | — | 
(meee [ammbx] — | — | — | — [| — | — | — | 70m) 
usw | <ea>,0x | Som) em) | ace | etO)_[ eC) 7H) | aLHTOY_| 3(00) 
[muluw | <ea>,Ox | 31070) | (470) | @(t/0) | om) | @(4m) | 717) | _6(1/0) | 31000) | 
[— mulsi | <ea>,0x | 501) | a(vvo) | ato | acim | adm | — | — | — 
[must [<ea>,0x | 501) | a(ivoy | att) | acim | am [ — | — | —~ 


wo 
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Table 3-13. Two Operand Instruction Execution Times 


EFFECTIVE ADDRESS 
OPCODE| <EA> (d16,An) | (d8,An,Xi*SF) 
A -(A 
Ean oe (616,20) |,P0.xPSF 






















a ZU IUD 
a ee 
a 
[sbi | ty0> | — | amy [am [ amy) 
sm | Fo ea SS ae A 
ae ae ee ee 





3.12 MISCELLANEOUS INSTRUCTION EXECUTION TIMES 


Table 3-14. Miscellaneous Instruction Execution Times 


OPCODE EFFECTIVE ADDRESS 























| Rn | (An) | (An)+ | -(An) | (d16,An) |(d8,An,Xi*SF)| xxx.wil | xxx 
LB Ca ae ee CC (a (re Ee ee, 
a cs a 
BE a 
[amew | conox | nom) [PS 
<ea>cor} 1(0) |_— | — | — | — | — | _— | 10) 
[a 
nove | =e] ooo | — | — | — | —_ Tao 
1 ka =e De on oct 
Frown [eowanet[ — asia] — | — fawn? 
| movem.| | &listi<ea>|  — | 2ancoiny®@| | si aemcony?@ | | 
Ss ee ed es Se 
| pea | cea | — | 20) | — | — |[ aon | seom® | 201) | — | 
puss [i my [dr 
ae a ce) Oe 
=p [aim [2 
i ae aE. El a 
Bc 1 eR SST mei (GE 
ae MOO. et ee 
ee OD 
Twiiata [~<eas | — | 7am | 7m | 7m) | 700) | atmo) | 7am) [| — 
debug [<e> | — | to@oy [—— | — | o@m[— | — [| —_ 


If a MOVE.W #imm,SR instruction is executed and #imm[13] = 1, the execution time is 1(0/0). 
nis the number of registers transferred by the MOVEM opcode. 

5The execution time for STOP is the time required until the processor begins sampling continuously for interrupts. 
4PEA execution times are the same for (d16,PC). 

> PEA execution times are the same for (d8,PC,Xi*SF). 





2 
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3.13 BRANCH INSTRUCTION EXECUTION TIMES 


Table 3-15. General Branch Instruction Execution Times 
orcoe| Fam [am | wr | ty | SOA SRST | 
ae a ee ee ee ee |e 
re [as [= [800 [== 00 [6007 [oor 
Ss 
Pte | | le ey ee ee 
2 ae ee ee a ee Se eee | 


Table 3-16. BRA, Bcc Instruction Execution Times 














The following notes apply to the branch execution times: 


1. For the jmp <ea> instructions, where <ea> is (d16,PC) or xxx.wl, the branch acceler- 

ation logic of the Instruction Fetch Pipeline calculates the target address and begins 
prefetching the new path. Since the Instruction Fetch and Operand Execution Pipe- 
lines are decoupled by the FIFO instruction buffer, the execution time can vary from 1 
to 3 cycles, depending on the amount of decoupling. 


This same mechanism is used for the bra opcode. 


For all other <ea> values of the jmp instruction, the branch acceleration logic is not 
used, and the execution times are fixed. 


2. For the jsr xxx.wl opcodes, the same branch acceleration mechanism is used to initiate 
the fetch of the target instruction. Depending on the amount of decoupling between the 
IFP and OEP, the resulting execution times can vary from 1 to 3 cycles. 

The same acceleration techniques are applied to the bsr opcode. 


For the remaining <ea> values for the jsr instruction, the branch acceleration logic is 
not used, and the execution times are fixed. 


3. For conditional branch opcodes (bcc), there is a static algorithm used to determine the 
prediction state of the branch. This algorithm is as follows: 
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if bec is a forward branch && CCR[7] == 0 
then the bcc is predicted as not-taken 


if bec is a forward branch && CCR[7] == 
then the bcc is predicted as taken 


else if bcc is a backward branch 
then the bcc is predicted as taken 


The execution times in the BRA, Bcc Table assume that CCR[7] is negated. Another 
representation of the Bcc execution times is shown below: 


Table 3-17. Another Table of Bcc Instruction Execution Times 


PREDICTED | PREDICTED 
OPCODE | CORRECTLY | CORRECTLY | MISPREDICTED 
AS TAKEN _|AS NOT-TAKE 





The execution time for the “predicted correctly as taken” column can vary between 1 to 3 


cycles depending on the amount of decoupling between the Instruction Fetch and Operand 
Execution Pipelines as previously discussed. 
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SECTION 4 
PHASE LOCKED LOOP 


4.1 PLL FEATURES 


e The PLL locks to an input clock frequency at the CLKIN input and provides a processor 
clock frequency that is 2X the input clock frequency and a programmable system bus 
clock output that is 1/2, 1/3, or 1/4 the processor clock frequency. 


e The PLL input frequency may range from 16-45MHz, giving a maximum processor 
clock frequency of 9OMHz. 


e A reduced power mode will turn off the processor clock (PSTCLK) when a STOP 
instruction is executed. 





RSTO 
PSTCLK 
Sun DIVIDE DIVIDE 
CLKIN BY BCLKO 
CLKIN X 4 2 
FREQ(1:0] 
RSTI 
DIVIDE[1:0] 


Figure 4-1. Block Diagram of Phase-Locked Loop Module 


4.2 PLL SPECIFICATIONS 


e PLL lock time: 2.2ms at CLKIN running 45MHz 
e Input Frequency (CLKIN): 16.67MHz through 45MHz 
e¢ Output Frequency (BCLKO): BCLKO=PSTCLK/2 (16.7MHz through 45MHz) or 


BCLKO=PSTCLK/S (11.1MHz through 30MHz) or 
BCLKO=PSTCLK/4 (8.25MHz through 22.5MHz) 
e Internal Processor Clock (PSTCLK): PSTCLK=CLKIN x 2 (33.3MHz through 90MHz) 


MOTOROLA MCF5307 User’s Manual 4-1 





PLL 


4.3 PLL OPERATION 


4.3.1 Normal Mode 


A user-supplied CLKIN input frequency, within the range of 16.67 through 45 MHz, is 
multiplied up to create a 4X internal clock. This internal clock is divided by two to create 
the processor clock (PSTCLK). You must specify the frequency range of the input clock 
using FREQ[1:0] during reset. 


The processor clock is divided to create the system bus clock. The bus clock (BCLKO) 
divisor is determined by the logic level of the DIVIDE pins during reset. You can program 
the bus clock to be 1/2, 1/3 or 1/4 the frequency of the MCF5307 processor core clock, 
PSTCLK. | 





4.3.2 Reset / Initialization 


The PLL receives RSTI as an input directly from the pin. Additionally, four signals are 
multiplexed with D[3:0] (FREQ[1:0]:DIVIDE[1:0]) while RSTI is asserted. These signals 
are sampled during reset and registered by the PLL on the negation of RSTI to provide 
initialization information. FREQ[1:0] and DIVIDE[1:0] are used by the PLL to select the 
CLKIN frequency range and set the BCLKO/PSTCLK divide ratio, respectively. 


4.3.3 Reduced-Power Mode 


The PLL processor core clock output, PSTCLK, can be turned off in an orderly, 
predictable manner to conserve system power. To allow fast restart of the MCF5307 
processor core, the PLL continues to operate at the frequency configured at reset. 
PSTCLK is disabled using the CPU STOP instruction and will resume normal operation 
on interrupt, as described in the following subsection describing the PLL control register 
(PLLCR). 





4.3.4 Phase Locked Loop Control Register (PLLCR) 


The ENBSTOP bit must be set to 1 for the ColdFire CPU STOP instruction to be 
acknowledged. After reset, this bit will be cleared to 0 and must be set to 1 if you expect 
the MCF5307 to enter low-power modes. Only clocks to the core processor are turned off 

~ because of the CPU STOP instruction. All internal modules remain clocked and can 
generate interrupts to restart the ColdFire Core. 


The PLLCR control register bits PLLIPL[2:0] determine the minimum level at which an 
interrupt (decoded as an Interrupt Priority Level or IPL) must occur to awaken the PLL. 
The PLL will then turn clocks back on to the core processor and interrupt exception 
processing will take place. Table 4-1. outlines the settings of PLLIPL[2:0] and the interrupt 
ranges that will wake the core processor from a CPU STOP instruction. 
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The PLLCR is an 8-bit supervisor read-write register. 


PLL Control Register (PLLCR) Address MBAR + $08 


7 6 5 4 3 2 1 0 
ENBSTOP | PLLIPL[2] | PLLIPL[1] | PLLIPL(0] be ee ae es 
RSTI: 

0 0 0 0 0 0 0 0 


Figure 4-2. PLL Control Register (PLLCR) 


ENBSTOP- Enable CPU STOP instruction. 


0 = ENBSTOP disabled. 
1 = ENBSTOP enabled, STOP instruction will turn off clocks to ColdFire core. 


PLLIPL[2:0]- PLL Interrupt Priority Level to wake up from CPU STOP. 
Refer to Table 4-1. 


Table 4-1. Settings of PLLIPL[2:0] and Interrupts That Wake Up Core 


INTERRUPTS THAT WILL 
PLLIPL[2:0] TURN ON CLOCKS TO THE 
CORE PROCESSOR. 


Any interrupts will wake core 


Interrupts[7:2] 


Interrupts[7:3] 


Interrupts[7:5] 
Interrupts[7:6] 
Only Interrupt[7] 


No interrupts will wake core 


Interrupts[7:4] 





4.4 PLL PORT LIST 


4.4.1 Inputs 


CLKIN Input clock to the PLL. The input clock frequency may be 
between 16.67 MHz and 45 MHz. Input frequency may not 
change during normal operation. Changes are only 
recognized at reset. 


D 
= 


Active-low asynchronous input that indicates PLL is to enter 
reset mode. As long as RSTI is asserted, the PLL will be held 
in reset and will not begin to lock. 
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FREQ([1:0] This 2-bit input bus indicates the frequency range of CLKIN. — 
These signals are multiplexed with D[3:2] and are sampled 
while RSTI is asserted. Table 4-2 shows the bit settings 
required for correct PLL operation. These signals must be set 
to the correct values for proper operation. Note that these 
‘signals do not affect the frequency, but are required to set up 
the analog PLL. 


Table 4-2. CLKIN Frequency 


FREQ{1:0)/ | FREQUENCY 
OF CLKIN 
D[3:2] (MHZ) 


DIVIDE[1:0] This 2-bit input bus selects the BCLKO/PSTCLK ratio. These 
signals are sampled while RSTI is asserted and selects the 
ratios as indicated in Table 4-3 shown below. 


Table 4-3. BCLKO/PSTCLK Divide Ratios 


D[1:0) PSTCLK 
a) voruseo 
es 


es 











4.4.2 Outputs 


BCLKO This system bus clock output provides a divided version of the 
processor clock frequency (16.67MHz-45MHz), determined 
by DIVIDE[1:0]. 


PSTCLK This clock signal output provides a buffered processor clock 
frequency at 2X CLKIN. 


RSTO This output provides an external reset for peripheral devices. 
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4.5 TIMING DIAGRAMS 


4.5.1 PSTCLK and BCLKO 


Figure 4-3 illustrates the timing between CLKIN, PSTCLK and the three possible versions 
of BCLKO. There will be an unspecified skew between CLKIN and PSTCLK, as well as 
CLKIN to BCLKO. PSTCLK is a delayed copy of the internal processor clock, so the skew 
between PSTCLK and BCLKO is also unspecified. 





CLKIN | 
ee | | | | | | | 
BCLKO (/2) 
BCLKO (/3) 


BCLKO (/4) 


NOTE: THESE CLOCK SIGNALS ARE SHOWN WITH EDGES ALIGNED TO ILLUSTRATE FREQUENCY RELATIONSHIP 
ACTUAL EDGES WILL HAVE SOME SKEW BETWEEN THEM. 


Figure 4-3. CLKIN, PSTCLK, and BCLKO Timing 


4.5.2 RSTI Timing 


Figure 4-4 illustrates PLL timing during reset. As shown, RSTI must be held low for a 
minimum of 80 cycles of CLKIN to allow time for the MCF5307 to begin its initialization 
sequence. At this time, the configuration pins should be asserted (D[3:2] for FREQ[1:0] 
and D[1:0] for DIVIDE[1:0]), meeting the minimum setup and hold times to RST! given in 
the AC Specifications of this manual. On the rising edge of RSTI, the data is latched and 
the PLL begins ramping to its final operating frequency. During this ramp and lock time, 
BCLKO will be held low. The PLL will lock in about 2.2ms with a CLKIN of 45MHz, at which 
time BCLKO and PSTCLK will begin normal operation in the specified mode. Actual lock 
time is dependent on the clock frequency at the input of the PLL. The PLL requires 
100,000 CLKIN cycles to guarantee PLL lock. To allow for reset of external peripherals 
requiring a clock source, the RSTO pin will remain asserted for a number of BCLKO 
cycles as shown in Figure 4-4. 
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100K CLKIN 
| ; >80 % | r CYCLE - | 
CLKS » LOCK TIME 


CLKIN 


BCLKO | | | | | | 
(1/2 MODE) 


30 BCLKS-———" 





20 BCLKS———3 | 


-—— 


15 BCLKS —— 


(1/3 MODE) 
BCLKO | | | | | | 
(1/4 MODE) 

PSTCLK | | | | | | 
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Figure 4-4. Reset and Initialization Timing 
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SECTION 5 
CACHE 


The MCF5307 processor contains a nonblocking, 8-kbyte, 4-way set-associative, unified 
(instruction and data) cache with a 16-byte line size. The cache improves system 
performance by providing low-latency data to the MCF5307 instruction and data pipes, 
which decouples processor performance from system memory performance, resulting in an 
increase in bus availability for alternate bus masters. 


The MCF5307 nonblocking cache services read hits or write hits from the processor while a 
fill (caused by a cache allocation) is in progress. 


As shown in Figure 5-1, both instruction and data accesses are performed using a single 
bus connected to the cache. All addresses from the processor to the cache are physical 
addresses. If the address matches one of the cache entries, the access hits in the cache. 
For a read operation, the cache supplies the data to the processor, and for a write operation, 
the data from the processor updates the cache. If the access does not match one of the 
cache entries (misses in the cache) or a write access must be written through to memory, 
the cache performs a bus cycle on the internal bus and correspondingly on the external bus 
by way of the system bus controller (SIM). Throughout this section, all cache accesses on 
the internal bus have a corresponding access on the external bus by way of the SIM. 













EXTERNAL 


B 
CONTROL LOGIC oa 


DATA ARRAY one 










OOLDHRE | SYSTEM 
PROCESSOR DIRECTORY ARRAY BUS 
CORE CONTROLLER 






ADDRESS/ 
DATA 








Figure 5-1. MCF5307 Unified Cache 
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The MCF5307 device does not implement a bus snooper. You must use software to 
maintain cache coherency with other possible bus masters. 


5.1 CACHE ORGANIZATION 


The 4-way set associative cache is organized as four levels (ways) of 128 sets with each 
line containing 16 bytes (four longwords) of storage. Figure 5-2 illustrates the cache 
organization (as well as the terminology used) along with the cache line format. 


Address bits A[10:4] provide an index to select a set. Levels are selected according to the 
rules of set association (discussed under 5.2 Cache Operation). 


Each line consists of an address tag (upper 21 bits of the address), two status bits, and four 


longwords of data. The two status bits consist of a valid bit and a dirty bit for the line. Address 
bits A3 and A2 select the longword within the line. 


LEVEL 0 LEVEL 1 LEVEL 2 LEVEL 3 


SET 126 


a 
a 
= 
ad ~ ~ 
T ~ 
a ° ~ ~ 
~ ~ 
: - ~ ~ 
~ ~ 
Pa ¢ S rs 
ca a ~ 





CACHE LINE FORMAT 


WHERE: 

TAG—21-BIT ADDRESS TAG 

V—VALID BIT FOR LINE 

D—DIRTY BIT FORLINE 

LWn—LONG WORD n(82-BIT) DATA ENTRY 





Figure 5-2. Cache Organization and Line Format 


5.2 CACHE OPERATION 


The cache stores an entire line, thereby providing validity on a line-by-line basis. For burst- 
mode accesses, only those that successfully read four longwords can be cached. 


A cache line is always in one of three states: invalid, valid, or dirty. For invalid lines, the V- 
bit is clear, causing the cache line to be ignored during lookups. Valid lines have their V-bit 
set and D-bit cleared, indicating the line contains valid data consistent with memory. Dirty 

cache lines have the V- and D-bits set, indicating that the line has valid entries that have not 
been written to memory. 


A cache line changes states from valid or dirty to invalid if the execution of the CPUSHL 


instruction explicitly invalidates the cache line. The cache should be explicitly cleared by 
setting the CINVA bit of the CACR after a hardware reset because reset does not invalidate 
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the cache lines. Following initial power-up, the cache contents will be undefined. The V- and 
D-bits may be set on some lines, necessitating the clearing of the cache before it is enabled. 


Figure 5-3 illustrates the general flow of a caching operation. To determine if the address is 
already allocated in the cache, (1) the cache set index A10-A4 is used to select one cache 
set. A set is defined as the grouping of four lines (one from each level), corresponding to the 
same index into the cache array. (2) The address bits of higher order (A31-A11) than the 
cache set index (A10-A4) are used as a tag reference or used to update the cache line tag 
field. (3)The four tags from the selected cache set are compared with the tag reference. If 
any one of the four tags matches the tag reference and the tag status is either valid or dirty, 
a cache hit has occurred.(4a) A cache hit indicates that the data entries (L_WO—LW3) in that 
cache line contain valid data (for a read access), or (4b) can be written with new data (fora 
write access). 














ADDRESS 
31 1110 43 0 
LEVEL 3 
TAG DATA/ TAG REFERENCE INDEX Ss LEVEL 2 
a 3 5 a GT LEVEL 1 
LEVEL 0 
ares 
HH ____. 










DATA OR 
INSTRUCTION 








ADDRESS 
A31—-A11 








LINE SELECT 











LOGICAL OR 


| COMPARATOR eee: 





ne ce 0 


Figure 5-3. Caching Operation 


MOTOROLA MCF5307 USER’S MANUAL 5-3 


CACHE 


To allocate an entry into the cache, the cache set index (A10-A4) is used to select one of 
the cache’s 128 sets. The status of each of the four cache lines for the selected set is 
examined. The cache control logic first looks for an invalid cache line to use for the new 
entry. If no invalid cache lines are available, a line from one of the four levels must be 
deallocated to host the new entry. The cache controller uses a pseudo-round-robin 
replacement algorithm to determine which cache line will be deallocated and replaced. After 
a cache line is allocated, the replacement pointer increments to point to the next level. 
During half-cache lock operation (HLCK equal to 1), the replacement pointer is forced to 
point to either level 2 or level 3. 


In the process of deallocation, a cache line that is valid and not dirty is invalidated. A dirty 
cache line is placed in a push buffer (to do an external cache line push) before being 
invalidated. Once a cache line is invalidated, a new entry can replace it. 


When a cache line is selected to host a new cache entry, three things happen: 


1. The new address tag bits A[31:A11] are written to the tag 

2. The data bits LWO-LW3 are updated with the new memory data 

3. The cache line status changes to a valid state. 
Read cycles that miss in the cache allocate normally as previously described. Write cycles 
that miss in the cache do not allocate on a cachable writethrough region, but do allocate for 
addresses in a cachable copyback region. A copyback byte, word, longword, or line write 
miss will 
Cause the cache to initiate a line fill, 
Allocate space for a new line, 


Set the status bits to indicate valid and dirty 


fo. OSS 


Write the data in the allocated space. No write to memory occurs. 


Read hits do not change the status of the cache line and no deallocation or replacement 
occurs. Write hits in cacheable writethrough regions perform an external write cycle; write 
hits in cacheable copyback regions do not perform an external write cycle. 


lf the cache hits on a read access, data is driven back to the processor core. If the cache 
hits on a write access, the data is written to the appropriate portion of the accessed cache 
line. If the data access is misaligned, the misalignment module breaks up the access into a 
sequence of smaller aligned cache accesses. Any misaligned operand reference generates 
at least two cache accesses. Because eniry validity is provided only on a line basis, the 
entire line must be loaded from system memory on a cache miss for the cache to contain 
any valid information for that line address. 


Noncacheable write accesses (i.e., those designated as cache-inhibited by the Cache 
Control Register (CACR) or Access Control Register (ACR)) bypass the cache and perform 
a corresponding external write. Normally, noncacheable read accesses bypass the cache 
and the read access is performed on the external bus. The exception to this normal 
operation occurs when all of the following conditions are true during a noncacheable read: 
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¢ Noncacheable fill buffer bit (DNFB) is set in the Cache Control Register (CACR) 
¢ Access is an instruction read - 
e Access is normal (i.e., transfer type (TT) equals 0) 


In this case, an entire line is fetched and stored in the fill buffer. It remains valid there and 
the cache can service additional read accesses from this buffer until another fill occurs or a 
cache invalidate all occurs. 


Valid cache entries that match during noncachable address accesses are neither pushed 
nor invalidated. Such a scenario suggests that the associated cache mode for this address 
space was changed. Use the CPUSHL instruction to push and/or invalidate the cache entry, 
or set the CINVA bit of the CACR to invalidate the entire cache before switching cache 
modes. 


5.3 CACHE CONTROL REGISTER (CACR) 


The CACR is a 32-bit register that contains cache control information. The CACR can be 
written via the MOVEC register instruction (register control field of the MOVEC instruction = 
$002). A hardware reset clears the CACR, which disables the cache; however, reset does 
not affect the tags, state information, and data within the cache. The CACR is illustrated 
below. NOTE - all bits shown as “O” are reserved 


31 30 29 28 27 26 24 16 15 14 10 9 8 7 6 5 4 0 
[eo [0 esa [ori HLcK] [of owwATo[OLofoLaT o] 0 [ofopopay Ove] vow | 0] 0] ow| off of ojo 





Cache Control Register (CACR) 


EC—Enable Cache 


O = cache disabled 
1. cache enabled 


Bit 30—Reserved 


ESB — Enable Store Buffer 


0 = all writes to writethrough or noncachable imprecise space will bypass the store 
buffer and generate bus cycles directly. 

1 = the 4 entry first-in-first-out (FIFO) store buffer is enabled; this buffer defers pending 
writes to writethrough or cache-inhibited imprecise regions to maximize 
performance 


Accesses to cache-inhibited precise space always bypass the store buffer. 


DPI—Disable CPUSHL Invalidation 


O = each cache line is invalidated as it is pushed 
1 = CPUSHLed lines remain valid in the cache 


HLCK—1/2 Cache Lock Mode 


O= cache operates in normal full cache mode 
1 = cache operates in one-half cache lock mode 
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When this mode is enabled, levels 0 and 1 of the cache are locked such that their lines will 
never be displaced or allocated. 


Bits 26—25—Reserved 


CINVA—Cache Invalidate All 


0 = no invalidation is performed 
1 = initiate an invalidation of the entire cache 


Writing a 1 to this bit will initiate entire cache invalidation. Once invalidation is complete, this 
bit will automatically return to O (i.e., you do not have to set it back to 0). This bit is always 
read as a0. 


Bits 23—11—Reserved 


DNFB—Default Noncacheable Fill Buffer 


0 = fill buffer is not used to store noncacheable accesses 

1 = fill buffer is used to store noncacheable accesses | 

—fill buffer used only for normal (TT = 0) instruction reads of a noncacheable region 
—the instructions are loaded into the fill buffer via a burst access (same as a line fill) 


Note 


It is possible that this feature can cause a coherency problem for 
self-modifying code. If enabled and a noncacheable access oc- 
curs that uses the fill buffer, the instructions remain valid in the 
fill buffer until a cache-invalidate-all instruction is issued, another 
noncacheable burst, or any miss that initiates a fill occurs. If a 
write occurs to the line in the fill buffer, the write will go to the ex- 
ternal bus without updating or invalidating the fill buffer. Any sub- 
sequent reads of that written data will be serviced by the fill 
buffer and receive stale information. , 


DCM—Default Cache Mode | 
This field selects the default cache mode and access precision as follows: 


00 = cacheable, writethrough 

01 = cacheable, copyback 

10 = cache-inhibited, precise exception model 
11 = cache-inhibited, imprecise exception model 


Bits 7,6—Reserved 


DW—Default Write Protect 
This bit indicates the default write privilege. 


0 = read and write accesses permitted 
1 = write accesses not permitted 
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Bits 4—O—Reserved 


5.4 ACCESS CONTROL REGISTERS 


The 32-bit Access Control Registers (ACRO and ACR1) assign access control attributes to 
specific regions of address space. The ACR registers can be written via the MOVEC 
instruction. (ACRO has register control field of the MOVEC instruction = $004; ACR1 has 
register control field of the MOVEC instruction = $005). For overlapping regions, ACRO 
takes priority. The control attributes are cache mode and write protection. Data transfers to 
and from these registers are longword transfers. The register below illustrates the ACR 
format. The paragraphs that follow describe the fields within the ACR. Bits 12—7, 4, 3, 1, and 
O always read as zero. At reset, the enable bit is forced to zero. 


31 24 23 16 15 14 13 12 11109 8 7T 6 5 4 3 2 


miata corso [eed] [*[e[°]>[°] [°[>]»]+ |] 


Access Control Register Format (ACRO, ACR1) 





Bits 31-24— Address Base 


This 8-bit field is compared with address bits A31—A24. Addresses that match in this 
comparison (and are otherwise eligible) are assigned the access control attributes of this 
register. 


Bits 23-16— Address Mask 

Because this 8-bit field contains a mask for the address base field, setting a bit in this field 
causes the corresponding bit in the address base field to be ignored. Regions of memory 
larger than 16 Mbytes can be assigned the access control attributes of this register by 
setting some of the address mask bits to 1’s. The low-order bits of this field can be set to 
define contiguous regions larger than 16 Mbytes. The mask can define multiple 
noncontagious regions of memory. . 


E—Enable | | 
This bit enables or disables the access control attributes of the region defined by this 
register: 


O = access control attributes disabled 
1 = access control attributes enabled 


S—Supervisor Mode 
This field specifies the way FC2 matches an address: 


00 = match only if FC2 =0 (user mode access) 


01 = match only if FC2 = 1 (Supervisor mode access) 
= ignore FC2 when matching 
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Bits 12—7—Reserved by Motorola 


CM—Cache Mode 
This field selects the cache mode and access precision as follows: 


00 = cacheable, ‘writethrough 

01 = cacheable, -copyback | 

10 = cache-inhibited, precise exception model 
11 = cache- inhibited, imprecise exception model 


W—Write Protect — 
This bit indicates the write privilege of the ACR region. 


0 = read and write accesses permitted 
1 = write accesses not permitted 


Bits 4,3,1,0—Reserved by Motorola 


5.5 CACHE MANAGEMENT 


By using the MOVEC instruction to access the CACR, you enable and configure the cache. 
A hardware reset clears the CACR, disabling the cache, and removing all configuration 

information; however, reset does not affect the tags, state information, and data within the 
cache. You must set the CINVA bit in the CACR to invalidate the cache before enabling it. 


The CINVA bit of the CACR allows invalidation of the entire cache only. The privileged 
CPUSHL instruction supports cache management by selectively pushing and invalidating an 
individual cache line. The address register used with the CPUSHL instruction directly | 
addresses the cache’s directory array. The CPUSHL instruction will either push and 
invalidate a line, or push and leave the line valid, depending on the state of the DPI bit of the 
CACR. To push the entire cache, you must implement a software loop to index through all 
128 sets and each of the 4 lines within each set (for a total of 512 lines). The state of the 
cache enable bit in the CACR does not affect the operation of CPUSHL instruction nor the 
CINVA bit of the CACR. 


The CPUSHL instruction flushes a cache line. The instruction format i is shown below, where 
AN is an address register. 





The contents of An used with the CPUSHL instruction specify cache row and line indexes. 
This differs from the MC68040 where An specifies a physical address. The format for An is 


31 11 10 4. 8 2 1 0 


a ee Setndex 
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Bits A10 - A4 specify a set index and bits 3-0 specify the cache level. Address bits A3-A2 
are “don’t cares” for this instruction. 


The following code example flushes the entire M5307 unified cache: 


_cache_flush: 


nop ; synchronize - flush store buffer 
moveq. 1 #0,da0 ; Aisable cache... 
movec.d0 cacr ; ... by clearing the cacr 
moveq.1 #0, dd ; zero levelcounter 
moveq. 1 #0, dl ; zero setcounter 
move. 1 dd, ad ; initialize An 
setloop: 
cpushl bc, (a0) ; push the cache line identified by a0 
add.1 #0x0010, aO ; increment setindex by 1 
addq.1 lig: 2 ; increment setcounter 
cmpi.l #128, dal ; check if sets for current level are done 
bne setloop -}; more sets to flush 
moveq.1 #0, dl ; zero set counter 
addq.1 #1, dod ; increment level counter 
add.1 do, dal ; form set and level for An 
move.1 dil, a0 ; initialize An 
empi.1 #4, dod ; check if levels are done 
bne setloop 
rts 


5.6 CACHING MODES 


Every cache access has an associated caching mode that determines how the cache 
handles the access. An access can be cacheable in either the writethrough or copyback 
modes, or it can be cache-inhibited in precise or imprecise modes. For normal accesses, 
the CM field (from the ACR) corresponding to the address of the access specifies one of 
these caching modes. When the access address does not match either of the ACRs, ing 
default caching mode defined by the DCM field of the CACR is used. 


Addresses matching an ACR can also be write-protected using the W bit of that ACR. 
Addresses that do not match either of the ACRs can be write-protected using the DW bit of 
the CACR. 


Reset disables the cache and places 0’s in all CACR and ACR bits. Consequently, after 
reset, the defaults are writethrough cache mode and no addresses are write-protected. Note 
that you—and not reset—invalidate cache entries. 


The ACRs allow the defaults to be overridden. In addition, some instructions (e.g., CPUSHL) 
and processor core operations perform accesses that have an implicit caching mode 
associated with them. The following paragraphs discuss the different caching accesses and 
their related cache modes. 
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5.6.1 Cacheable Accesses 


If the CM field of an ACR or the default field of the CACR indicates writethrough or copyback, 
the access is cacheable. A read access to a writethrough or copyback region is read from 
the cache if matching data is found. Otherwise, the data is read from memory and updates 
the cache. When a line is being read from memory for both a writethrough read miss anda 
copyback read miss, the longword within the line that contains the core-requested data is 
fetched first, and the requested data is given immediately to the processor. This operation 
releases the processor while the remaining three longwords of the line are read from 
memory and stored in the cache. 


The following paragraphs describe the writethrough and copyback modes in detail. 


5.6.1.1 WRITETHROUGH MODE. Write accesses to regions specified as writethrough are 
always passed on to the external bus, although the cycle can be buffered (depending on the 
state of the ESB bit in the CACR). Writes in writethrough mode are handled with a no-write- 
allocate policy—i.e., writes that miss in the cache are written to the external bus, but do not 
cause the corresponding line in memory to be loaded into the cache. Write accesses that hit 
always write through to memory and update matching cache lines. The cache supplies data 
to instruction or data-read accesses that hit in the cache; read misses cause a new cache 

line to be loaded into the cache. 


5.6.1.2 COPYBACK MODE. Copyback regions are typically used for local data structures 
or stacks to minimize external bus use and reduce write-access latency. Write accesses to 
regions specified as copyback that hit in the cache update the cache line and set the 
corresponding D-bit without an external bus access. The dirty cache data is written to 
memory only if the line is replaced because of a miss or a CPUSHL instruction pushes the | 
line. If a byte, word, longword, or line write access misses in the cache, the required cache 
line is read from memory, thereby updating the cache. When a miss selects a dirty cache | 
line for replacement, the current cache data moves to the push buffer. The replacement line - 
is read into the cache and the push buffer contents are then written to memory. 


5.6.2 Cache-Inhibited Accesses 


You can designate as cache-inhibited those address space regions containing targets such 
as I/O devices and shared data structures in multiprocessing systems. If the corresponding 
CM field (of the ACR) or DCM field (of the CACR) indicates precise or imprecise, then the 
access is cache-inhibited. The caching operation is identical for both cache-inhibited modes. 
The difference between these inhibited cache modes has to do with recovery from an 
external bus error. | | 


Noncacheable write accesses bypass the cache and a corresponding external write is - 
performed. Normally, noncacheable read accesses bypass the cache and the read access 
is performed on the external bus. The exception to this normal operation occurs when all of 
the following conditions are true during a noncacheable read: | 

¢ The noncacheable fill buffer bit (DNFB) is set in the Cache Control Register (CACR) 


e Access is an instruction read 
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e Access is normal (i.e., transfer type (TT) equals 0) 


In this case, an entire line is fetched and stored in the fill buffer. It remains valid there and 
the cache can service additional read accesses from this buffer until another fill occurs or a 
“cache invalidate all” occurs. 


If the CM field indicates either noncacheable precise or noncacheable imprecise modes, the 
cache controller bypasses the cache and performs an external transfer. If a cache line 
matching the current address is already resident in the cache and the cache mode for that 
region is cache-inhibited, the cache does not automatically push the line if itis dirty, nor does 
it invalidate the line if it is valid. You should first execute a CPUSHL instruction or set the 
CINVA bit of the CACR (to invalidate the entire cache) prior to switching the cache mode. 


If the CM field indicates precise mode, the sequence of read and write accesses to the 
region is guaranteed to match the sequence of the instruction order. In imprecise mode, the 
processor core allows read accesses that hit in the cache to occur before completion of a 
pending write from a previous instruction. Writes will not be deferred past operand-read 
accesses that miss in the cache (i.e., that must be read from the bus). Precise operation 
forces operand-read accesses for an instruction to occur only once by preventing the 
instruction from being interrupted after the operand-fetch stage. Otherwise, /f not in precise 
mode and an exception occurs, the instruction is aborted and the operand may be accessed 
again when the instruction is restarted. These guarantees apply only when the CM field 
indicates the precise mode and the accesses are aligned. 


All CPU space-register accesses (e.g. MOVEC) are always treated as noncacheable and 
precise. 


5.7 CACHE PROTOCOL 
The following paragraphs describe the cache protocol for processor accesses and assumes 
that the data is cacheable (i.e., writethrough or copyback). 


5.7.1 Read Miss 


A processor read that misses in the cache requests a bus transaction causes from the cache 
controller. This bus transaction reads the needed line from memory and supplies the 
required data to the processor core. The line is placed in the cache in the valid state. 


5.7.2 Write Miss 


The cache controller handles processor writes that miss in the cache differently for 
writethrough and copyback regions. Byte, word, longword, or line write misses to copyback 
regions load the cache line from an MBUS line read. The new cache line is then updated 
with write data and the D-bit for the line is set, leaving the cache line in the dirty state. Write 
misses to writethrough regions write directly to memory without loading the corresponding 
cache line into the cache. 


5.7.3 Read Hit 


On a read hit, the cache provides the data to the processor core. No MBUS transaction is 
performed and the cache line state remains unchanged. If the cache mode changes for a 
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specific region of address space, lines in the cache corresponding to that region that contain 
dirty data will not be pushed out to memory when a read hit occurs within that line. You 
should first execute a CPUSHL instruction or set the CINVA bit of the CACR (to invalidate 
the entire cache) before switching the cache mode. 


5.7.4 Write Hit 


The cache controller handles processor writes that hit in the cache differently for 
writethrough and copyback regions. For write hits to a writethrough region, the portions of 
the cache line(s) corresponding to the size of the access are updated with the data. The data 
is also written to the external memory. The cache line state remains unchanged. If the 
access is copyback, the cache controller updates the cache line and sets the D-bit for the 
line. An external write is not performed and the cache line state changes to (or remains in) 
the dirty state. 


5.8 CACHE COHERENCY 


The MCF5307 provides limited support for maintaining cache coherency in multimaster 
environments. Both writethrough and copyback memory update techniques are supported 
to maintain coherency between the cache and memory. 


The cache does not support snooping (i.e., cache coherency is not supported while alternate 
masters are using the bus). 


5.9 MEMORY ACCESSES FOR CACHE MAINTENANCE 


The cache controller performs all maintenance activities that supply data from the cache to 
the processor core. The activities include requesting accesses to the SIM for reading new 
cache lines and writing dirty cache lines to memory. The following paragraphs describe the 
memory accesses resulting from cache-fill and push operations. Refer to Section 7 Bus 
Operation for detailed information about the required bus cycles. 


5.9.1 Cache Filling 


When a new cache line is required, the internal bus controller requests a line read from the | 
SIM. The SIM requests a burst-read transfer by indicating a line access with the size signals 
(SIZ[1:0]). 


The responding device supplies four longwords of data in sequence. If the responding 
device does not support the burst mode, it should assert the TBI signal for the first longword 
of the line access. The SIM responds by terminating the line access and completing the 
remainder of the line read as three sequential longword reads. 


SIM line accesses implicitly request burst-mode operations from memory. For more 
information regarding burst-mode accesses on the external bus, see the Bus Operations 
section for additional detail. 


When a cache line read is initiated, the first cycle tries to load the longword entry © 
corresponding to the address the processor core requested. Subsequent transfers are for 
the remaining longword entries in the cache line. 


5-12 MCF5307 USER’S MANUAL MOTOROLA 


CACHE 


A bus error occurring during a burst operation aborts the operation. If the bus error occurs 
during the first cycle of a burst, the data from the bus is ignored and the line is not cached. 
If the access is a data cycle, exception processing proceeds immediately. If the cycle is for 
an instruction prefetch, a bus-error exception is not taken immediately, but will be taken if 
the instruction flow subsequently causes an attempt of the instruction. Refer to the Bus 
Operations section for more information about this operation. 


When a bus error occurs on the second cycle or later, the burst operation aborts and the line 
is not cached. The processor may or may not take an exception, depending on the status of 
the pending data request. If the bus-error cycle contains a portion of a data operand that the 
processor is specifically waiting for (e.g., the second half of a misaligned operand), the 
processor immediately takes an exception. Otherwise, no exception occurs and the cache 
line fill is repeated the next time data within the line is required. 


5.9.2 Cache Pushes 


When the cache controller selects a dirty cache line for replacement, memory must be 
updated with the dirty data before the line is replaced. Cache pushes occur for line 
replacement and as required for the execution of the CPUSHL instruction. To reduce the 
requested data’s latency in the new line, the dirty line being replaced is temporarily placed 
in the push buffer while the new line is fetched from memory. After the bus transfer for the 
new line completes, the dirty cache line is written back to memory and the push buffer is 
invalidated. 


5.10 PUSH AND STORE BUFFERS 


The push buffer reduces latency for requested new data on.a cache miss by temporarily 
holding displaced dirty data while the new data is fetched from memory. The push buffer 
contains 16 bytes of storage (one displaced cache line). 


If a cache miss displaces a dirty line, the miss read reference is immediately placed on the 
MBUS. While waiting for the response, the current contents of the cache location load into 
the push buffer. Once the bus transaction (burst read) completes, the cache controller can 
generate the appropriate line-write bus transaction to write the contents of the push buffer 
into memory. 


The store buffer implements a FIFO buffer that can defer pending writes to imprecise 
regions in order to maximize performance. The store buffer can support as many as four 
entries (16 bytes maximum) for this purpose. 


For operand writes destined for the store buffer, the processor core incurs no stalls. The 
store buffer effectively provides a measure of decoupling between the pipeline’s ability to 
generate writes (one write per cycle maximum) and the ability of the external bus to retire 
those writes. When writing to imprecise regions, a stall will occur only in the event of a full 
store buffer and a write operation is present on the internal bus. The internal write cycle Is 
held, stalling the operand execution pipeline. 


If the store buffer is not used (i.e., store buffer disabled or cache-inhibited precise mode), 
external bus cycles are generated directly for each pipeline write operation. The instruction 
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is held in the EX cycle of the operand execution pipeline (OEP) until external bus transfer 
termination is received. This means each write operation is stalled for 5 cycles, making the 
minimum write time equal to 6 cycles when the store buffer is not used. 


The store buffer enable bit (bit ESB of the CACR) controls the enabling of the store buffer. 
This bit can be set and cleared via the MOVEC instruction. At reset, this bit is cleared and 
all writes are precise. The ACR CM field or CACR DCM field generates the mode used when 
this bit is set. The cacheable writethrough and the cache-inhibited imprecise modes use the 
store buffer. 


The store buffer can queue data to as much as four bytes wide per entry. Each entry 
matches a corresponding bus cycle it will generate; therefore, a misaligned longword write 
to a writethrough region will create two entries if the address is to an odd-word boundary, 
three entries if to an odd-byte boundary—one per bus cycle. 


5.11 PUSH AND STORE BUFFER BUS OPERATION 


Once the push or store buffer has valid data, the internal bus controller uses the next 
available external bus cycle to generate the appropriate write cycles. In the event that 
another cache fill is required (e.g., cache miss to process) during the continued instruction 
execution by the processor pipeline, the pipeline will stall until the push and store buffers are 
empty before generating the required external bus transaction. 


Certain instructions and exception processing that synchronize the processor core 
guarantee the push and store buffers are empty before proceeding. 


5.12 CACHE OPERATION SUMMARY 


The following paragraphs discuss the operational details for the cache and present state 
diagrams depicting the cache line state transitions. 


The cache supports a line-based protocol allowing individual cache lines to be in one of 
three states: invalid, valid, or dirty. To maintain coherency with memory, the cache supports 
both writethrough and copyback modes, specified by the CM field for the matched ACR or 
the DCM field of the CACR if no ACR matches. 


Read misses and write misses to copyback regions cause the cache controller to read a new 
cache line from memory into the cache. If available, tag and data from memory update an 
invalid line in the selected set. The line state then changes from invalid to valid by setting 
the V-bit for the line. If all lines in the row are already valid or dirty, the pseudo-round-robin 
replacement algorithm selects one of the four lines and replaces the tag and data contents 
of the line with the new line information. Before replacement, dirty lines are temporarily 
buffered and later copied back to memory after the new line has been read from memory. 
Figure 5-4 illustrates the three possible states for a cache line, with the possible processor- 
initiated transitions. Transitions are labeled with a capital letter, indicating the previous state, 
followed by a number indicating the specific case listed in Table 5-1. , 
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CI5— CINVA CV1—CPU READ MISS 


Cl6— CPUSHL & DPI | CV2—CPU READ HIT 


ae L & DPI CV7 ; -_ DPI 
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COPYBACK waa Sa COPYBACK 
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CV5—CINVA 
CV6—CPUSHL & DPI 


CI3— CPU 
WRITE MISS CDi—CPU 


READ MISS 


CD7—CPUSHL & DPt 
CV3—CPU WRITE MISS 
CV4—CPU WRITE HIT 


CD5—CINVA 
CD6—CPUS 
& DPI 


copyRAG 


CD2— CPU READ HIT 
CD3—CPU WRITE MISS 
CD4—CPU WRITE HIT 


COPYBACK CACHING MODE 

WV1—CPU READ MISS 
WI3—CPU WRITE MISS WV2—CPU READ HIT 
WI5—CINVA WV3—CPU WRITE MISS 
WI6—CPUSHL & DPI WV4—CPU WRITE HIT 
WI7—CPUSHL & DP! WV7—CPUSHL & DPI 








WI1i— CPU READ MISS 
WRITE- 
THROUGH 
INVALID 
WV5— CINVA 
WV6— CPUSHL & DPI 


WRITETHROUGH CACHING MODE 
Figure 5-4. Cache Line State Diagrams 


Table 5-1. Cache Line State Transitions 





CACHE CURRENT STATE 
OPERATION INVALID CASES VALID CASES DIRTY CASES 













Push dirty cache line to push 
buffer; 








Read new line from memory 
and update cache; 

Supply data to processor; 
Write push buffer contents to 
memory; 

Go to valid state. 


; Supply data to processor; Supply data to processor; 
READ HIT | (C,W)I2 | Not possible. (C,wW)V2 CD2 Ramaininccursnraie. 


Read line from memory and 


Read new line from memory 
update cache; 


and update cache; 


READ MISS | (C,W)I1 (C.\wyV1 







Supply data to processor; 
Go to valid state. 







supply data to processor; 
Remain in current state. 
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Table 5-1. Cache Line State Transitions (Continued) 





CACHE i 4 CURRENT STATE 
OPERATION INVALID CASES VALID CASES DIRTY CASES 
Push dirty cache line to push 
buffer; 


Read new line from memory 
and update cache; 


Go to dirty state. pila buffer contents to 


Remain in current state. 


WI3 Write data to memory; WV3 Write data to memory; ‘. 
Remain in current state. Remain in current state. st 











Read line from memory and 
update cache; 


Write data to cache; 
Go to dirty state. 


Read new line from memory 
and update cache; 


Write data to cache; 


WRITE MISS 
(COPYBACK 


MODE) 





WRITE MISS 
WRITE- 
THROUGH 
MODE) 


WRITE HIT 
(COPYBACK 
MODE) 





Write data to memory and to 


; Write data to cache; 
pot pesenle: Go to dirty state. 
Not possible. cache; 
Remain in current state. 


CACHE No action; No action; (dirty 2 
INVALIDATE | (MIS (WIS | Go to invalid state. Go to invalid state. 
Be ee Push dirty cache line to memo- 
CACHE No action; No action; 
. PUSH (C,W)I6 Remain in current state. (C,W)V6 Go to invalid state. CD6 
| CACHE No action; | No action; | 
PUSH (C,W)I7 Remain in current state. (C,W)V7 Remain in current state. CD7 


Note 


The shaded areas indicate that the cache mode has changed for 
the region corresponding to this cache line. In writethrough 
mode, a cache line should never be dirty. 


WRITE HIT 
WRITE- 













ry; 
Go to invalid state. 
Push dirty cache line to memo- 






ry; 
Go to valid state 





To avoid these states: 
1. Execute a CPUSHL instruction, or 


2. Set the CINVA bit of the CACR (to invalidate the entire cache) 
before switching the cache mode. 
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6.1 SRAM FEATURES 
4K (4096 Byte) SRAM, organized as 1024 x 32 Bits 
Single-Cycle Access 


Physically Located on Processor's High-Speed Local Bus 
e Memory Location Programmable on any 32 KByte Address 
e Memory Address Space Mappings Defined by User 

e Byte, Word, Longword Address Capabilities 

¢ Memory Mapping Defined by the Customer 


6.2 SRAM OPERATION 


The SRAM module provides a general-purpose memory block that the ColdFire processor 
can access in a single cycle. The location of the memory block can be specified to any 0- 
modulo-32K address within the four gigabyte address space. The memory is ideal for storing 
critical code or data structures or for use as the system stack. Because the SRAM module 
is physically connected to the processor's high-speed local bus, it can service processor- 
initiated access or memory-referencing commands from the Debug module. 


Depending on configuration information, instruction fetches and operand reads may be sent 
to both the unified cache and the SRAM block simultaneously. If the reference is mapped 
into the region defined by the SRAM, the SRAM provides the data back to the processor, 
and the cache data discarded. Accesses from the SRAM module are not cached. 


6.3 SRAM PROGRAMMING MODEL 


6.3.1 SRAM Base Address Register (RAMBAR) 


The configuration information in the SRAM Base Address Register (RAMBAR) controls the 
operation of the SRAM module. 


e The RAMBAR is the register that holds the base address of the SRAM. The RAMBAR 
is accessed as control register $C04 using the privileged MOVEC instruction. The 
MOVEC instruction provides write-only access to this register. 


e The RAMBAR register can be accessed from the Debug module in a similar manner. 
From the Debug module, the register can be read or written. 


e All undefined bits in the register are reserved. These bits are ignored during writes to 
the RAMBAR, and return zeroes when read from the debug module. 
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e The RAMBAR valid bit is cleared by reset, disabling the SRAM module. All other bits 
are unaffected. 


The RAMBAR register contains four control fields. These fields are detailed in the 


following subsections. The next illustration is that of the SRAM Base Address Register 
(RAMBAR). 


SRAM Base Address Register (RAMBAR) 


31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 


BA31 | BA30 | BA29| BA28 | BA27 | BA26 | BA25| BA24| BA23}| BA22| BA21| BA20| BA19| BA18| BA17} BA16 





15° 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 





SRAM Base Address Register (RAMBAR) 


BA[31:15] - Base Address 


This field defines the 0O-modulo-32K base address of the SRAM module. The SRAM 
memory occupies a 4KByte space defined by the contents of the Base Address field. By 
programming this field, the SRAM may be located on any 32KByte boundary within the 
processor's four gigabyte address space. 


- WP - Write Protect 


This field allows only read accesses to the SRAM. When this bit is set, any attempted write 
access will generate an access error exception to the ColdFire processor core. 


0 = Allow read and write accesses to the SRAM module 
1 = Allow only read accesses to the SRAM module 


C/l, SC, SD, UC, UD - Address Space Masks 


This five bit field allows certain types of accesses to be “masked,” or inhibited from 
accessing the SRAM module. The address space mask bits are: 

* C/l= CPU Space/Interrupt acknowledge cycle mask — 

e SC = Supervisor Code address space mask - 

¢ SD = Supervisor Data address space mask 

¢ UC = User code address space mask | 
_ ¢ UD = User Data address space mask 
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For each address space bit: 





O = An access to the SRAM module can occur for this address space 

1 = Disable this address space from the SRAM module. If a reference using this 
address space is made, it is inhibited from accessing the SRAM module, and is 
processed like any other non-SRAM reference. 


These bits are useful for power management as detailed in Section 6,3.5. 


V - Valid 


The valid bit (V-bit) is specified by RAMBAR[0]. A hardware reset clears this bit. When 
set, this bit enables the SRAM module; otherwise, the module is disabled. 


O = Contents of RAMBAR are not valid 
1 = Contents of RAMBAR are valid 





The mapping of a given access into the SRAM uses the following algorithm to determine 
if the access “hits” in the memory: 


if (RAMBAR[0O] = 1) 
if (requested address[31:12] = {RAMBAR[31:15],3’b000}) 
if (ASn of the requested type = 0) 

Access is mapped to the SRAM module 

1f (access = read) 
Read the SRAM and return the data 

if (access = write) 
if (RAMBAR[8] = 0) 

Write the data into the SRAM 

else Signal a write-protect access error 


where ASn refers to the five address space masks (C/I, SC, SD, UC, UD). 
6.3.2 SRAM Initialization 


After a hardware reset, the contents of the SRAM module are undefined. The valid bit of 
the RAMBAR is cleared, disabling the module. If the SRAM needs to be initialized with 
instructions or data, perform the following steps: 


1. Load the RAMBAR mapping the SRAM module to the desired location within the 
address space. 


2. Read the source data and write it to the SRAM. There are various instructions to 
support this function, including memory-to-memory move instructions, or the 
MOVEM opcode. The MOVEM instruction is optimized to generate line-sized burst 


fetches on 0-modulo-16 addresses, so this opcode generally provides maximum 
performance. 
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3. After the data has been loaded into the SRAM, it may be appropriate to load a 
revised value into the RAMBAR with a new set of “attributes.” These attributes 
consist of the write-protect and address space mask fields. 


The ColdFire processor or an external emulator using the Debug module can perform 
these initialization functions. : 


6.3.3 SRAM Initialization Code — 


The code segment below describes how to initialize the SRAM. The code sets the base 
address of the SRAM at $20000000 and then initializes it to zeros. 


RAMBASE  EQU.-—s- $20000000 | +set this variable to $20000000 
move.l #RAMBASE+1, D0 »>load RAMBASE + valid bit into DO. 
movec.l DO, RAMBAR >load RAMBAR and enable SRAM 


The following loop initializes the entire SRAM to zero 


lea.l RAMBASE, AQ. ;load pointer to SRAM 
move.1 #1024,D0 ;load loop counter into DO 


SRAM_INIT LOOP: ak ; 
Cla el. (AQ) + ;clear 4 bytes of SRAM 


subq.1 #1,D0 | ;decrement loop counter 


bne.b SRAM_INIT_LOOP ;if done, then exit; else continue looping 


6.3.4 Power Management 


As noted previously, depending on the configuration defined by the RAMBAR,, instruction 
fetch and operand read accesses may be sent to the SRAM and unified cache 
simultaneously. If the access is mapped to the SRAM module, it sources the read data, 
and the unified cache access is discarded. If the SRAM is used only for data operands, 
asserting the ASn bits associated with instruction fetches can decrease power dissipation. 
Additionally, if the SRAM contains only instructions, masking operand accesses can 
reduce power dissipation. 7 


Consider the examples in Table 6-1 of typical RAMBAR settings: 
Table 6-1. Examples of Typical RAMBAR Settings 


DATA CONTAINED IN SRAM RAMBAR(7:0] 







Code Oni 





Dala Ony 
Both Code An Baa 
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SECTION 7 
BUS OPERATION 


This section describes the function of the bus, the signals that control the bus, and the bus 
cycles provided for data-transfer operations. Operation of the bus is defined for transfers 
initiated by the MCF5307 device as a bus master and for transfers initiated by an alternate 
bus master. This section includes descriptions of the error conditions, bus arbitration, and 
the reset operation. 


7.1 FEATURES 


The following list summarizes the key bus operation features: 





¢ Up to 32 bits of address and data 

e« Access 8-, 16-, and 32-bit port sizes 

e Generates byte, word, longword, and line size transfers 
e Bus arbitration for external masters 

e Burst and burst-inhibited transfer support 

¢ {Internal termination generation 

e Termination generation for alternate masters 

e Synchronous external signal termination supported 


7.2 BUS AND CONTROL SIGNALS 


This section defines the signals required by the MCF5307 bus. Although the timing of all of 
these signals is referenced to the BCLKO, it is not considered a bus signal. It is expected 
that the clock will be routed as needed to meet application requirements. 

This section describes MCF5307 signals. Table 7-1 summarizes the signals. A brief 
description of the signals functionality follows. 


The following signals are defined as the bus attribute signals: R/W, TT, TM, and SIZ. The 


following signals are defined as the bus control signals: AS, TA, TS, and TIP. 


Note: an overbar indicates an active-low signal. 
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Table 7-1.CF-Bus Signal Summary 


















7.2.1 Address Bus 


The address bus provides the address of the byte or most significant byte of the word or 
longword being transferred. The address lines also serve as the DRAM address pins. 
When an external master is using the DRAM controller or Chip-Select Module, the 
external master drives the address bus and asserts TS or AS to indicate a bus cycle is 
starting. During an interrupt-acknowledge access, the lower address lines, A[4:2], indicate 
the interrupt level being acknowledged. 


7.2.1.1 ADDRESS BUS - (A[23:0]). The lower 24 bits of the address bus become valid 
when TS is asserted. Bits A[4:2] indicate the interrupt level during interrupt-acknowledge 
cycles. 


7.2.1.2 ADDRESS BUS - (A[31:24]/PP[15:8]). These multiplexed pins can serve as the 
most significant byte of the address bus, or as the most significant byte of the parallel port. 
Programming the Pin Assignment Register (PAR) in the SIM determines the function of 

each of these eight multiplexed pins. You can program these on a bit-by-bit basis. 


A[31:24] 


When any of these pins are enabled in the PAR, they represent the most significant bits 
of the address bus. As much as 4 Gbytes of memory is available when all of these pins 
are programmed as address signals. 


PP[15:8] 
When any of these pins are enabled in the PAR, they represent the most significant bits 
of the parallel port. 
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7.2.2 Data Bus (D[31:0]) 


The data bus is a bidirectional, nonmultiplexed bus. Data gets latched on the bus on the 
rising clock edge. When interfacing with external memory or peripherals, the data bus port 
width, wait states, and internal termination are initially defined by D[7:0] during reset. You 
can program the port width for each chip-select and DRAM bank. The data bus uses the 
default configuration if none of the chip-selects or DRAM bank match the address decode. 
The default configuration is 32-bit port, with external termination, and burst inhibited. The 
data bus transfers byte, word, or longword-sized data. All 32 bits of the data bus are driven 
during writes, regardless of port width or operand size. 


7.2.3 Read/Write - (R/W) 


When the MCF5307 processor is the bus master, it drives the R/W signal to indicate the 
direction of subsequent data transfers. It is driven high during read bus cycles and driven 
low during write bus cycles. This signal is an input during alternate master access. 


7.2.4 Size - (SIZ[1:0]) 


When it is the bus master, the MCF5307 processor outputs these signals to indicate the 
requested data transfer size. Table 7-2 shows the definition of the bus request size 
encodings. When the MCF5307 device is not the bus master, these signals function as 
inputs. 





Table 7-2. Bus Cycle Size Encoding 


sero) [PORT SIZE 





7.2.5 Transfer Start - (TS) 


The MCF5307 processor asserts this signal during the first clock cycle when address and 
attributes (TM, TT, TM, TIP, R/W, size) are valid address is driven on A[31:0] andis | 
negated in the following clock cycle. When the MCF5307 device is not the bus master, TS 
is an input. 


7.2.6 Address Strobe - (AS) 


Address Strobe is an active-low signal that indicates the start of a bus cycle and the 
address is stable. The address and attributes are guaranteed to be valid during the entire 
period that AS is asserted. This signal is asserted and negated on the falling edge of the 
clock. When the MCF5307 device is not the bus master, AS is an input. 


7.2.7 Transfer Acknowledge - (TA) 


When the MCF5307 device is master, the external system drives this input signal to 
terminate the bus transfer. The bus will continue to be driven until this synchronous signal 
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is asserted. For write cycles, the processor will continue to drive data one clock after TA 
is asserted. During read cycles, the peripheral must continue to drive data until TA is 
recognized. The TA signal may be tied low if all bus cycles can support fast 
termination.Note that TA cannot be tied low if external masters are present. The 
MCF5307 device will drive TA if an external master requests it. 


7.2.8 Transfer In Progress - (TIP/PP[7]) 


This multiplexed pin can serve as the transfer in progress output, or as one bit of the 
parallel port. Programming the Pin Assignment Register (PAR) in the SIM determines the 
function of this pin. 


This output is asserted to indicate that a bus transfer is in progress and is negated during 
idle bus cycles if the bus is still granted to the processor. Note that TIP is held asserted 
on back-to-back bus cycles. | 


7.2.9 Transfer Type - (TT[1:0]/PP[1:0]) 


These multiplexed pins can serve as the transfer type outputs, or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of each of these two multiplexed pins. The pins are programmable on a bit-by-bit basis. 





When the MCF5307 is the bus master, it outputs these signals. They indicate the type of 
access for the current bus access. Table 7-3 shows the definition of the encodings. 


Table 7-3. Bus Cycle Transfer Type Encoding 


TT[1:0] TRANSFER TYPE 
ee 
Alternate Master Access 


Emulator Access 


CPU Space or Interrupt Acknowledge 














7.2.10 Transfer Modifier - (TM[2:0}/PP[4:2]) 


These multiplexed pins can serve as the transfer type outputs, or as three bits of the 
parallel port. Programming the Pin Assignment Register (PAR) in the SIM determines the 
function of each of these three multiplexed pins (which are programmable on a bit-by-bit 
basis). 


These input signals provide supplemental information for each transfer type (see Table 7- 
4 ). For emulation transfers, the TM signals indicate user or data transfer types (see 
Table 7-6 ). For CPU space transfers, the TM signals are low (see Table 7-7 ). For interrupt 
acknowledge transfers, the TM signals carry the interrupt level being acknowledged (see 
Table 7-7 ). See the alternate master section for information on TM decoding. | 


7.2.11 Interrupt Request - (IRQ7,IRQ5, IRQ3,IRQ1) 
You can use these four pins as predefined interrupt request signals(IRQx). The IRQx pins 
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are set to default interrupt request levels for users, corresponding to levels 1, 3, 5, and 7 
bus control signals. Programming the Pin Assignment Register (PAR) in the SIM 
determines the function of this pin.In the Pin Assignment Register, you can redefine the 
interrupt levels for IRQ5, IRQ3, and IRQ1 (on a bit-by-bit basis). 


7.3 CLOCK AND RESET SIGNALS 
These signals provide the external system interface for the MCF5307 device. 


Table 7-4. CF-Bus Signal Summary 


a 
CLKIN Clock Input 

Pano | on | Semi oe oume—_ 

a 


7.3.1 Reset - (RSTI) 


Asserting RSTI will cause the MCF5307 processor to enter reset exception processing. 
When RSTI is recognized, the address bus, data bus, TT, SIZ, R/W, AS and TS will be 
three-stated; BR and BD will be negated. 


7.3.2 Clock Input - (CLKIN) 


CLKIN is the MCF5307 input clock frequency to the on-board phase-locked loop-clock 
generator. CLKIN is used to internally clock or sequence the MCF5307 internal bus 
interface and slave module logic. 


7.3.3 System Bus Clock Output - (BCLKO) 


This output signal is generated by the internal PLL, and is the system bus clock output 
used as the bus timing reference by the external devices. BCLKO is a 1/2, 1/3, or 1/4 of 
the processor clock. 


7.3.4 Reset Out - (RSTO) 


Following the assertion of RSTI, the PLL will temporarily lose its lock. During this time, the 
RSTO signal will assert. When the PLL regains lock, the RSTO signal will again negate. 
You can use this signal to reset external devices. 
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7.4 BUS CHARACTERISTICS 


The MCF5307 processor uses a single clock signal (CLKIN) to generate its internal clock 
as well as the bus clock (BCLKO). Therefore, the external bus operates at the same 
speed as the internal clock rate, where all bus operations are synchronous to the rising 
edge of BCLKO, and the bus control signals (AS) are synchronous to the falling edge of 
the BCLKO, which is visually represented in Figure 7-1. 





BCLKO a - 
OUTPUT 
SIGNALS 
| 
| tvo tho | 
<> ; 


OUTPUT | 
CONTROL | 
| 


tyo = Propagation delay of signal relative to BCLKO edge 
tho = Output hold time relative to BCLKO edge 

t,j = Required input setup time relative to BCLKO edge 
thi = Required input hold time relative to BCLKO edge 


Figure 7-1. Signal Relationships to BCLKO 
7.5 DATA TRANSFER OPERATIONS 


The transfer of data between the MCF5307 processor and other devices involves the 
following signals: 

Address bus (A[31:0]) 

Data bus (D31:0]) 

Control signals (AS) 

Attribute signals (R/W, TT, TM, TIP, SIZ) 


- ON > 
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The MCF5307 bus supports byte, word, and longword operand transfers and allows 
accesses to 8-, 16-, and 32-bit data ports. With the MCF5307 device, you can select the 
port size of the specific memory, enable internal transfer termination, and set the number 
of wait states for the external slave being accessed by programming the Chip-Select 
Control Registers (CSCRs) and the DRAM Controller Control Registers (DCCRs). For 
more information on programming these registers, refer to the SIM, Chip-Select and 
DRAM Controller sections. Figure 7-2 illustrates the byte lanes that external chip-select 
memory and DRAM should be connected to. 



















ser 
2 a 
i 

16-BIT PORT BYTE 1 

8-BIT PORT 


Figure 7-2. Connections for External Memory Port Sizes 


The MCF5307 processor will compare the address and mask in chip-select 0 - 7 control 
registers, then the address and mask in DRAM bank 0 - 1 control registers. 


e If the address and attributes do not match in a single chip-select register or DRAM 
conirol register, the MCF5307 will run an external bus cycle with external termination 
on a 32-bit port with burst-inhibited transfers. 


e Should an address and attribute match in multiple chip-select registers, the matching 
chip-select signals will be driven; however, the MCF5307 device will run an external 
bus cycle with external termination on a 32-bit port with burst-inhibited transfers. 


e Should an address and attribute match both DRAM controller registers or a DRAM 
control register and a chip-select, the operation is undefined. 


Table 7-5 shows the type of access depending on what matches are made in the CS and 
DRAM control registers 


Basic operation of the MCF5307 bus is a three-clock bus cycle. During the first clock, the 
address, attributes, and TS are driven. AS is asserted at the falling edge of the clock to 
indicate that address and attributes are set up and stable. Data and TA are sampled 
during the second clock of a bus-read cycle. During a read, the external device provides 
data and is sampled at the rising edge at the end of the second bus clock. This data is 
concurrent with TA, which is also sampled at the rising edge of the clock. During a write, 
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Table 7-5. Accesses by Matches in CS and DRAM Control Registers 
























NUMBER OF DRAM 
Mie oe eee CONTROLLER REGISTER TYPE OF ACCESS 
REGISTER MATCHES MATCHES tis og 





















[sage rnin yp ot on 


sali ae ae __ External 





| None Single As defined by DRAM Control Register | 


Single Single Undefined 






Mull Undefined 
ull Undefined 


lil Undefined 
util Wt Undefined 


the ColdFire device drives data from the rising clock edge at the end of the first clock to 
the rising clock edge at the end of the bus cycle. You can add wait states between the first 
and second clocks by delaying the assertion of TA. The last clock of the bus cycle uses 
what would be an idle clock between cycles to provide hold time for address, attributes 
and write data. Figure 7-4 and Figure 7-6 show the basic read and write operations. 


7.5.1 Read Cycle 


During a read cycle, the MCF5307 device receives data from memory or from a peripheral 
device. The read cycle flowchart is shown in Figure 7-3 while the read cycle timing 
diagram is shown in Figure 7-4. 








MCF5307 SYSTEM 


SET RW TO READ 
PLACE ADDRESS ON A(31:0] 


ASSERT TT[1:0], TM[2:0], TIP, AND 
SIZ[1:0] SIGNALS 


ASSERT TRANSFER START 


ASSERT ADDRESS STROBE (AS) 
NEGATE TRANSFER START (TS) 


DECODE ADDRESS AND SELECT THE 
APPROPRIATE SLAVE DEVICE. 


DRIVE DATA ON D{31:0] 


ASSERT TRANSFER ACKNOWLEDGE 
TA 

SAMPLE TRANSFER ACKNOWLEDGE un) 
LOW AND LATCH DATA 





1. REMOVE DATA FROM D[31:0] 
2, NEGATE TA 





Figure 7-3. Read Cycle Flowchart 
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Figure 7-4. Basic Read Bus Cycle 


A basic bus cycle has a minimum of six states (SO-S5). The various signals are asserted 
during specific states of a read cycle as follows: 


STATE 0 


The read cycle starts in state 0 (SO). The MCF5307 device places a valid address on the 
address bus, and asserts the R/W, TT[1:0], TM[2:0], TIP, SIZ[1:0], and TS signals. 


STATE 1 


AS is asserted on the falling edge of state 1 (S1) to indicate that address and attributes 
are set up and stable. 


STATE 2 
TS is negated on the rising edge of state 2 (S2). 


STATE 3 


During state 3 (S3), the MCF5307 device waits for a cycle termination signal (TA). If TA is 
not asserted before the rising edge at the end of S3, the MCF5307 device inserts wait 
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states (full clock cycles) until TA is asserted. Data is provided by the external device and 
is sampled on the rising edge of S3 with TA. 


STATE 4 


During state 4 (S4), the external device should remove the data from the data bus and 
negate TA. | 


STATE 5 
AS is negated on the falling edge of state 5 (S5). 
7.5.2 Write Cycle 


During a write cycle, the MCF5307 device sends data to the memory or to a peripheral 
device. 


The write cycle flowchart is shown in Figure 7-5 while the write cycle timing diagram is 
shown in Figure 7-6. 





MCF5307 SYSTEM 


SET R/W TO WRITE 
PLACE ADDRESS ON A{31:0] 


ASSERT TT[1:0}, TM[2:0], TIP, AND 
SIZ[1:0] SIGNALS 





ASSERT TRANSFER START 
ASSERT ADDRESS STROBE (AS) | 
PLACE DATA ON D31-D0 B| 1. DECODE ADDRESS 
NEGATE TRANSFER START (TS) 2. STORE DATA ON D[31:0] 
38. ASSERT TRANSFER ACKNOWLEDGE 
(TA) 


SAMPLE TRANSFER ACKNOWLEDGE 
LOW 


REMOVE DATA FROM D[31:0] 
NEGATE TA 





1. START NEXT CYCLE 





Figure 7-5. Write Cycle Flowchart 
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Figure 7-6. Basic Write Bus Cycle 


The descriptions of the six states of a basic write cycle follows: 


STATE 0 

The read cycle starts in state 0 (SO). The MCF5307 device places a valid address on the 
address bus. R/W is driven to a logic low. The MCF5307 device asserts the TT[1:0], 
TM[2:0], TIP, SIZ[1:0], and TS signals. 

STATE 1 


AS is asserted on the falling edge of state 1 (S1) to indicate that address and attributes 
are set up and stable. 


STATE 2 


TS is negated on the rising edge of state 2 (S2). The data bus is driven out of the high 
impedance state as data is placed on the bus. 
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STATE 3 


During state 3 (S3), the MCF5307 device waits for a cycle termination signal (TA). If TA 
is not asserted before the rising edge at the end of S3, the MCF5307 device inserts wait 
states (full clock cycles) until TA is asserted. The external device provides the data, which 
is sampled on the rising edge of S3 with TA. 


STATE 4 
During state 4 (S4), the external device should negate TA. 


STATE 5 
AS is negated on the falling edge of state 5 (S5). 


7.5.3 Fast Termination Cycles 


Two clock cycle transfers are supported on the MCF5307 bus. In most cases, this will be 
impractical to use in a system because the termination must take place in the same half 
clock that AS is asserted. As this will be atypical, it is not referred to as the “zero-wait-state 
case,” but is called the “fast-termination case.” Figure 7-7 and Figure 7-8 show the fast 
termination bus cycles. 








Figure 7-7. Read Cycle with Fast Termination 
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The descriptions of the four states of a fast termination read cycle follows: 


STATE 0 


The read cycle starts in state 0 (SO). The MCF5307 device places a valid address on the 
address bus, and asserts the R/W, TT[1:0], TM[2:0], TIP, SIZ[1:0], and TS signals. 





STATE 1 


AS is asserted on the falling edge of state 1 (S1) to indicate that address and attributes 
are set up and stable. To get fast termination, TA must be asserted during S1. Data is 
provided by the external device and is sampled on the rising edge of S1 with TA. 


STATE 4 


During state 4 (S4), the external device should remove the data from the data bus and 
negate TA. TS is negated on the rising edge of state 4 (S4). 


STATE 5 
AS is negated on the falling edge of state 5 (S5). 





Figure 7-8. Write Cycle with Fast Termination 


The descriptions of the four states of a fast termination write cycle follows: 
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The descriptions of the four states of a fast termination write cycle follow: 


STATE 0 

The read cycle starts in state 0 (SO). The MCF5307 device places a valid address on the 
address bus. R/W is driven to a logic low. The MCF5307 device asserts the TT[1:0], © 
TM[2:0], TIP, SIZ[1:0], and TS signals. 


STATE 1 


AS is asserted on the falling edge of state 1 (S1) to indicate that address and attributes 
are set up and stable. : 


STATE 4 


During state 4 (S4), the external device should negate TA. TS is negated on the rising 
edge of state 4 (S4). The data bus is driven out of the high-impedance state as data is 
placed on the bus. During state 4 (S4), the MCF5307 device waits for a cycle termination 
signal (TA). 





STATE 5 — | 
AS is negated on the falling edge of state 5 (S5). 


7.5.4 Back-to-Back Bus Cycles | 


The MCF5307 device allows back-to-back bus cycles on the bus. The MCF5307 device 
will run back-to-back bus cycles whenever possible. For example, when a longword read 
is started on a word-size bus, the processor will perform two word reads back to back. The 
distinguishing feature of this type of cycle is the TIP signal being asserted continuously. 
Figure 7-9 shows two bus cycles that occur back to back. 


For illustration purposes, a read and a write cycle are used. There are no restrictions on 


cycles being either reads or writes for them to be back to back. You cannot tell the 
processor when or when not to initiate a back-to-back cycle. 
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SO S1 S2 S3 S4 S5 SO S1 S2 $3 S84 $5 





Figure 7-9. Back-to-Back Bus Cycles 


7.5.5 Line Bus Cycles 


The MCF5307 bus can support 2-1-1-1 burst cycles to maximize cache performance and 
optimize DMA transfers. You can add wait states by delaying termination of the cycle. The 
initiation of a burst cycle is encoded on the size pins. 


In the MCF5307 device, any region of the memory space can be declared “burst inhibited” 
by clearing the Chip-Select Burst Read-Enable and Burst Write-Enable bits for that region. 
If a line access Is initiated to a region that is burst inhibited, the first access on the MF5307 
bus will be encoded as a line access, but the following accesses will be separated by AS 
negations. The transfer size encoded on SIZ[1:0] will not exceed the programmed port 
size. 


A line is defined as a 16-byte value, aligned in memory on 16-byte boundaries. Although 
the line itself is aligned on 16-byte boundaries, the line access does not necessarily begin 
on the aligned address. Therefore, the bus interface supports line transfers on multiple 
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address boundaries. The allowable patterns during a line accesses are shown in Table 7- 
6. | 


Table 7-6. Allowable Line Access Patterns 


| ADDRES] 2] LONGWORD ACCESSES 
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7.5.5.1 LINE READ BUS CYCLES. Figure 7-10 shows a line access read with zero wait 
states. Figure 7-11 shows a line access read with one wait state. Figure 7-12 shows a line 
read access that is burst inhibited with fast termination. 


C6 


C5 


C4 


C3 


C2 


C1 





Qo 
- 


BCLKO 
A[31:0] 
R/W 
TT[1:0] 
TM[2:0] 
D[31:0] 


Figure 7-10. Line Read Burst (2-1-1-1) 
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Figure 7-11. Line Read Burst (3-2-2-2) 
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Fast 





Fast 


Fast 


Basic 





ae 
= 


BCLKO 
A[31:0] 

R/W 
TT[1:0] 
TM[2:0] 


Figure 7-12. Line Read Burst-Inhibited with Fast Termination 
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7.5.9.2 LINE WRITE BUS CYCLES. Figure 7-13 and Figure 7-14 show burst line access 
writes. Figure 7-15 shows a burst-inhibited line write. 





a 
= 


BCLKO 
A[31:0] 
R/W 
TT[1:0] 
TM[2:0] 
SIZ[1:0] 
DI31:0] 


Figure 7-13. Line Write Burst (2-1-1-1) 
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oO 
i 


BCLKO 
A[31:0] 
RW 
TT[1:0] 
TM[2:0] 

D[31:0] 


Figure 7-14. Line Write Burst (4-2-2-2) with One Wait State 
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R/W 


D[31:0] 
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2 
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2 «< 


TT[1:0] 
TM[2:0] 


Figure 7-15. Line Write Burst-Inhibited 
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7.6 INTERRUPT EXCEPTIONS 


When a peripheral device needs the MCF5307 device or is ready to send information that 
the ColdFire core requires, it can signal the ColdFire core to take an interrupt exception. 
The interrupt exception transfers control to a routine that responds appropriately. The 
peripheral device uses the interrupt-request signals (IRQx) to signal an interrupt condition 
to the MCF5307 device. 





The MCF5307 device has two levels of interrupt masking: System Integration Module 
(SIM) interrupt controller, and the Status Register three-bit interrupt priority mask. 


The first level of interrupt masking is in the interrupt controller in the System Integration 
Module (SIM). The Interrupt Mask Registers in the SIM compare interrupt inputs with 
interrupt mask levels that you program. The SIM outputs only those interrupts that have 
not been masked. 


The Status Register (SR) provides the second level of interrupt masking in the ColdFire 
core through the three-bit interrupt priority mask. The interrupt priority mask bits contain 
the highest priority level that the ColdFire core ignores. When an interrupt request has a 
priority higher than the value in the mask, the ColdFire core makes the request a pending 
interrupt. For more information about the Status Register refer to Status Register in 
Section 3 ColdFire Core. 


The MCF5307 device continuously samples the external interrupt input signals and 
synchronizes these signals. An interrupt request must be held constant for at least two 
consecutive BCLKO periods to be considered a valid input. Also, the interrupt request 
must maintain the interrupt request level until the MCF5307 device acknowledges the 
interrupt with an interrupt-acknowledge cycle to guarantee that the interrupt is recognized. 


NOTE 


Interrupt levels 1 through 6 are level-sensitive only. Interrupt 
level 7 is both level sensitive and edge triggered as described 
in 7.6.1 Level 7 Interrupts. 


The MCF5307 device takes an interrupt exception for a pending interrupt within one 
instruction boundary after processing any other pending exception with a higher priority. 
Thus, the MCF5307 device executes at least one instruction in an interrupt exception 
handler before recognizing another interrupt request. 


If autovector generation is used for internal interrupts (the AVEC bit in the appropriate 
interrupt control register in the SIM is 1), the interrupt acknowledge vector will be 
generated internally and no interrupt acknowledge cycle will be generated on the external 
bus. Refer to Section 8 SIM for ICR programming. 


If autovector generation is used for external interrupts (the appropriate AVEC bit in the 
auto vector control register in the SIM is 1), no interrupt acknowledge cycle will be shown 
on the external bus (AS will not be asserted) unless the BLK bit in the auto vector control 
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register is O. Consequently, you must clear the external interrupt in the interrupt service 
routine. Refer to Section 8 SIM for more information on the auto vector control register. 


7.6.1 Level 7 Interrupts 


Level 7 interrupts are handled differently than interrupt levels 1 through 6. A level 7 inter- 
rupt is a nonmaskable interrupt; therefore, a 7 in the interrupt mask does not disable a 
level 7 interrupt. 


Level 7 interrupts are edge triggered by a transition from a lower priority request to the 
level 7 request, as opposed to interrupt levels 1 through 6, which are level sensitive. 
Therefore, if IRQ7 remains asserted, the MCF5307 device will only recognize one level 7 
interrupt because only one transition from a lower level request to a level 7 request oc- 
curred. For the processor to recognize a level 7 interrupt followed by another level 7 inter- 
rupt, one of the two following sequences must occur: 





1. The interrupt request level on the interrupt control pins changes from a lower re- 
quest level to level 7 and remains at level 7 until the interrupt-acknowledge bus cycle 
begins. Later, the interrupt request level returns to a lower interrupt request level 
and then back to level 7, causing a second transition on the interrupt control lines. 


2. The interrupt request level on the interrupt control pins changes from a lower re- 
quest level to level 7 and remains at level 7. If the interrupt handling routine for the 
level 7 interrupt lowers the interrupt mask level, a second level 7 interrupt will be rec- 
ognized even though no transition has occurred on the interrupt control pins. After 
the level 7 interrupt handling routine completes, the MCF5307 device will compare 
the interrupt mask level to the interrupt request level on the IRQx signals. Because 
the interrupt mask level will be lower than the requested level, the interrupt mask will 
be set back to level 7. The level 7 request on IRQ7 must be held until the second 
interrupt-acknowledge bus cycle has begun to ensure that the interrupt is recog- 
nized. 








For more information on interrupts in general, see the application note A Discussion of 
Interrupts for the MC68000 (AN1012). 


7.6.2 Interrupt-Acknowledge Cycle 


When the MCF5307 device processes an interrupt exception, it performs an interrupt- 
acknowledge bus cycle to obtain the vector number that contains the starting location of 
the interrupt-exception handler. 


The interrupt-acknowledge bus cycle is a read transfer. It differs from a normal read cycle 
in the following respects: 


e TT[1:0] = $3 to indicate a CPU space or acknowledge bus cycle 
e TM{[2:0] = the level of interrupt being acknowledged 
e Address signals A[31:5] are set to all ones (G$7FFFFF) 
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e Address signals A[4:2] are set to the interrupt request level being acknowledged 
e Address signals A[1:0] are set to all zeros ($0) 


The responding device places the vector number on D[31:24] of the data bus during the 
interrupt-acknowledge bus cycle and the cycle is terminated normally with TA. Figure 7- 
16 illustrates an interrupt-acknowledge cycle terminated with TA. 

MCF5307 SYSTEM 















DRIVE $7FFFFF ON A[31:5] 
DRIVE $0 ON A[1:0] 

DRIVE INTERRUPT LEVEL ON A[4:2] 

DRIVE R/W TO READ (RW = 1) 

DRIVE SIZ[1:0] TO INDICATE BYTE (SIZ1 = $0, SIZO =$1) 


DRIVE TT[1:0] AND TM[2:0] TO INDICATE INTERRUPT 
ACKNOWLEDGE (TT[1] = TT[0] = $1 AND TM[2:0] = interrup 
level) 


ASSERT TS FOR ONE BCLKO CYCLE 









1. NEGATE TS 


2. DRIVE TM[2:0] TOINDICATE INTERRUPT ACKNOWLEDGE 
(TM[2:0] = interrupt level) 









1. | DECODE ADDRESS AND SELECT THE APPROPRIATE SLAVE 
DEVICE. 


2. _ DRIVE DATA ON D31:24] 
ASSERT TA FOR ONE BCLKO CYCLE 


1. REGISTER DATA (D[31:24)) 
2. RECOGNIZE THE TRANSFER IS DONE 





Figure 7-16. Interrupt-Acknowledge Cycle Flowchart 


7. BUS ARBITRATION 


The MCF5307 bus protocol provides for one bus master at a time: either the MCF5307 or 
an external device. If more than one external bus master is connected to the bus, an 
external arbiter can prioritize requests and determine which device is granted bus access. 
Bus arbitration is the protocol by which the MCF5307 device or an external device 
becomes the bus master. When the MCF5307 device is the bus masier, it uses the bus to 
read instructions and transfer data not contained in its internal cache or memory to and 
from external memory. When an alternate bus master owns the bus, the MCF5307 device 
can monitor the alternate bus master’s transfers and assert chip-select and DRAM control, 
and transfer termination signals. This capability is discussed in more detail in the Chip- 


Select Control Register subsection in Section 9 Chip-Selects, and DRAM subsection in 
Section 11 DRAM. 


The MCF5307 bus arbitration can be used in two modes. A two-wire mode is provided for 
systems where the MCF5307 device and a single external bus master are the only two 
masters arbitrating for use of the external bus. This arbitration mode uses the bus grant 


(BG) and bus driven (BD) signals. The external bus master can ignore the bus request 
(BR) signal. 
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The second mode is provided for systems where multiple external bus masters are 
arbitrating for use of the external bus. This arbitration mode requires an external bus 
arbiter and uses the BG, BD, and BR signals to control usage of the external bus. 


In either arbitration mode, the bus arbitration unit in the MCF5307 device operates 
synchronously and transitions between states on the rising edge of CLK. 


For systems where the MCF5307 device is the only possible bus master, the bus can be 
continuously granted to the MCF5307 processor by tying the BG signal to GND. An arbiter 
is not required. 


7.7.1 Bus Arbitration Signals 


This subsection defines the signals required for bus arbitration. Although the timing of all 
of these signals is referenced to the system clock, the system clock is not considered a 
bus signal. It is expected that the clock will be routed as needed to meet application 
requirements. See Table 7-7 . 


Table 7-7: ColdFire Bus Signal Summary 


a 
ee 


7.7.2 Bus Request - (BR) 


This output signal indicates to an external arbiter that the processor needs to become bus 
master for one or more bus cycles. BR is negated when the MCF5307 processor begins 
an access to the external bus with no other internal accesses pending, and BR remains 
negated until another internal request occurs. 


7.7.3 Bus Grant - (BG) 


An external arbiter asserts this input signal to indicate that the MCF5307 device can 
control the bus at the next rising edge of BCLKO. When the arbiter negates BG, the 
MCF5307 processor must relinquish the bus as soon as the current transfer is complete. 
The external arbiter must not grant the bus to any other master until both BD and BG are 
negated. | 


7.7.4 Bus Driven - (BD) 


The MCF5307 device asserts this output signal to indicate that it is the current master 
when it is driving the bus. If the MCF5307 device is the bus master but is not using the 
bus, the BD signal is not asserted. If the MCF5307 device loses bus mastership during a 
bus transfer, it will complete the last transfer of the current access, negate BD, and three- 
state all bus signals on the rising edge of BCLKO. If the MCF5307 device loses bus 
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mastership during an idle clock cycle, it will three-state all bus signals on the rising edge 
of BCLKO. 


7.7.5 Two-Master Bus Arbitration Protocol (Two-Wire Mode) 


The two-wire mode of bus arbitration allows the MCF5307 device to share the external 
bus with a single external bus master without requiring an external bus arbiter. Figure 7- 
17 shows the MCF5307 device connecting to an external bus master using the two- wire 
mode. In this mode, the active-low BG input of the MCF5307 device is connected to the 
active-high HOLDREQ output of the external bus master and the active-low bus-driven 
(BD) output of the MCF5307 device is connected to the active-high HOLDACK input of the 
external bus master. Because the external bus master controls the assertion/negation of 
HOLDREQ, it controls when the MCF5307 device is granted the bus, making the 
MCF5307 device the lower priority master. 


HOLDREQ 
i A(31:0] 
pa D[31:0] 
bell load i 
R/W 
oe ee year: 
‘a ee ae 








MCF5307 EXTERNAL BUS MASTER 


TO/FROM EXTERNAL MEMORY 
AND CONTROL 


Figure 7-17. MCF5307 Two-Wire Mode Bus Arbitration Interface 


When the alternate master is not using the bus, it negates HOLDREQ driving BG low, 
granting the bus to the MCF5307 device. When the MCF5307 processor has an internal 
bus request pending and BG is low, the MCF5307 device will drive BD low, negating 
HOLDACK to the external bus master. When the external bus master needs the external 
bus, it asserts HOLDREQ, driving BG high, requesting the MCF5307 device to relinquish 
the bus. If BG is negated while a bus cycle is in progress and if the external to master 
control bit is cleared, the MCF5307 processor will relinquish the bus at the completion of 
the bus cycle. Note that the MCF5307 device considers the individual transfers of a burst 
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or burst-inhibited access to be a single bus cycle and does not relinquish the bus until the. 
completion of the last transfer of the series. | 


When the bus has been granted to the MCF5307 device, one of two situations can occur. 
In the first case, if the MCF5307 processor has an internal bus request pending, the 
MCF5307 device asserts BD to indicate explicit bus ownership and begins the pending 
bus cycle by asserting TS. The MCF5307 device continues to assert BD until the 
completion of the bus cycle. If BG is negated by the end of the bus cycle, the MCF5307 
device will negate BD. As long as BG is asserted, BD remains asserted to indicate the bus 
is owned by the MCF5307 device and it continuously drives the address bus, attributes, 
and control signals. 


In the second situation, the bus is granted to the MCF5307 device, but it does not have 
an internal bus request pending, so it takes implicit ownership of the bus. The MCF5307 
device does not drive the bus and does not assert bus driven BD if the bus is implicitly 
owned. If an internal bus request is generated, the MCF5307 processor assumes explicit 
ownership of the bus. If explicit ownership was assumed because of an internal request 
being generated, the MCF5307 part immediately begins an access and asserts bus driven 
BD. 
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C1 C2 C3 C4 C5 C6 C7 C8 C9 


BCLKO 


A[31:0] 





ALTERNATE 
MASTER 


MCF5307 


Figure 7-18. Two-Wire Bus Arbitration with Bus Request Asserted 


In Figure 7-18, the alternate master is owner of the external bus during C1 and C2. During 
C3 the alternate master relinquishes control of the bus by asserting BG to the MCF5307 
device. At this point, there is an internal access pending so the MCF5307 device asserts 
BD during C4 and begins the access. Thus, the MCF5307 device becomes the explicit 
master of the external bus. Also during C4, the alternate master removes the grant from 
the MCF5307 device by negating BG. Because the MCF5307 processor is the current bus 
master, the MCF5307 device continues to assert BD until the current transfer has 
completed. Because BG is negated, the MCF5307 processor negates BD during C9 and 
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three-states the external bus, thereby returning external bus ownership to the alternate 
master. 


BCLKO 


A(31:0] 


IMPLICIT EXPLICIT 
OWNERSHIP OWNERSHIP 





ALTERNATE 


MASTER MCF5307 


Figure 7-19. Two-Wire Implicit and Explicit Bus Ownership 


In Figure 7-20, the alternate master has ownership of the external bus during Clock 1 (C1) 
and Clock 2 (C2). In Clock 3 (C3) the alternate master releases control of the bus by 
asserting BG to the MCF5307 device. During Clock 4 (C4) and Clock 5 (C5), the 
MCF5307 processor is implicit owner because an internal access is not pending. In C5, 
an internal bus request becomes pending, causing the MCF5307 processor to take 
explicit ownership of the bus in Clock 6 (C6) by asserting BD. In Clock 7 (C7), the alternate 
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master removes the bus grant to the MCF5307 device. The MCF5307 processor does not 
relinquish the bus (the MCF5307 device continues to assert BD) until the end of the 
transfer. | 


NOTE 


The MCF5307 device can start a transfer during the CLK cycle 
after BG is asserted. The alternate master should not assert 
BG to the MCF5307 device until it has stopped driving the bus. 
BG cannot be asserted while the alternate master transfer is 
still in progress or damage to the part could occur. 


Figure 7-20 is a bus arbitration state diagram for the MCF5307 bus arbitration protocol. 
Table 7-8 lists the conditions that cause bus arbitration state changes. Table 7-9 
describes the MCF5307 bus ownership, bus driving and assertion of bus driven (BD) for 
each state of the bus arbitration state machine. 








Figure 7-20. MCF5307 Two-Wire Bus Arbitration Protocol State Diagram 
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Table 7-8. MCF5307 Two-Wire Bus Arbitration Protocol Transition Conditions 
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NOTES 


1)“N” means negated; “A” means asserted; “AM” means alternate master.2)End of Cycle: Whatever terminates a bus 
transaction whether it is normal or bus error. Note that bus cycles that result from a burst inhibited transfer are 
considered part of that original transfer. 


| 
Table 7-9. MCF5307 Two-Wire Arbitration Protocol State Diagram 
[stare [ow | ussraus [wD 
“NotDriven | Negated 
| Expict Own [Yes «(| ——Criven «|= 


The MCF5307 device can be in any one of four arbitration states during bus operation: 
reset, alternate master ownership, implicit ownership, and explicit ownership. 






















The MCF5307 processor enters the reset state whenever RSTI or software watchdog 
reset is asserted In any bus arbitration state. When RSTI and the software watchdog reset 
are negated, the MCF5307 device proceeds to the implicit ownership state or alternate 
master ownership state, depending on BG. 





The alternate master ownership state denotes the MCF5307 device does not have 
ownership (BG negated) of the bus and the MCF5307 device does not drive the bus. The 
MCF5307 processor can assert memory control signals (i.e., CS[7:0], WE[3:0], RAS[1:0] 
or CAS[3:0]) and transfer acknowledge (TA) during this state. 


7-32 NMCF5307 User’s Manual MOTOROLA 


BUS OPERATION 





The implicit ownership state indicates that the MCF5307 device owns the bus because 
BG is asserted to it. The MCF5307 device, however, is not ready to begin a bus cycle. In 
this case, the MCF5307 processor keeps the bus three-stated until an internal bus request 
occurs. 


The MCF5307 device explicitly owns the bus when the bus is granted to it (BG asserted) 
and at least one bus cycle has been initiated. The MCF5307 processor asserts BD in this 
state to indicate the MCF5307 device has explicit ownership of the bus. Until BG is 
negated, the MCF5307 device retains explicit ownership of the bus whether or not active 
bus cycles are being executed. Once BG is negated, the MCF5307 processor will 
relinquish the bus at the end of the current bus cycle. When the MCF5307 processor is 
ready to relinquish the bus, it negates BD and three-states the bus signals. 


7.7.6 Multiple External Bus Master Arbitration Protocol (Three-Wire 
Mode) 


The three-wire mode of bus arbitration allows the MCF5307 device to share the external 
bus with any number of external bus masters. In this mode, an external arbiter must be 
provided to assign priorities to each of the possible bus masters and determine which 
master should be allowed use of the external bus. The bus arbitration signals of the 
MCF5307 device, BR, BD, and BG connect to the bus arbiter, allowing the bus arbiter to 
control use of the external bus by the MCF5307 device. 





The MCF5307 processor requests the bus from the external bus arbiter by asserting BR 
whenever an internal bus request is pending (the ColdFire core requests an access). The 
MCF5307 processor continues to assert BR until after the start of the external bus 
transfer. The MCF5307 processor can negate BR at any time regardless of the BG status. 
If the bus is granted to the MCF5307 processor when an internal bus request is generated, 
the MCF5307 processor will assert BD, allowing the access to begin immediately. The 
MCF5307 processor always drives BR and BD. They cannot be directly wire-ORed with 
other devices. 


The external arbiter asserts BG to indicate to the MCF5307 processor that it has been 
granted the bus and can begin a bus cycle after the rising edge of the next CLK. If BG is 
negated while a bus cycle is in progress, the MCF5307 processor relinquishes the bus at 
the completion of the bus cycle. To guarantee that the bus is relinquished, BG must be 
negated prior to the rising edge of the CLK in which the last TA is asserted. Note that the 
MCF5307 processor considers any series of bus transfers of a burst or a burst-inhibited 
transfer to be a single bus cycle and does not relinquish the bus until completion of the 
last transfer of the series. 


When the bus has been granted to the MCF5307 processor in response to the assertion 
of BR, one of two situations can occur. In the first case, if the MCF5307 processor has an 
internal bus request pending, the MCF5307 processor asserts BD to indicate explicit bus 
ownership and begins the pending bus cycle by asserting TS. The MCF5307 processor 
continues to assert BD until the external bus master negates BG, after which BD is 
negated at the completion of the bus cycle. As long as BG is asserted, BD remains 
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asserted to indicate that the MCF5307 processor owns the and the MCF5307 processor 
continuously drives the address bus, attributes, and control signals. 


In the second situation, the bus is granted to the MCF5307 processor, but the processor 
does not have an internal bus request pending. In this case, the MCF5307 processor 
takes implicit ownership of the bus. Implicit ownership of the bus occurs when the 
MCF5307 processor is granted the bus, but there are no pending bus cycles. The 
MCF5307 device does not drive the bus and does not assert BD if the bus is implicitly 
owned. If an internal bus request is generated, the MCF5307 device assumes explicit 
ownership of the bus. If explicit ownership was assumed due to an internal request being 
generated, the MCF5307 processor immediately begins an access and asserts BD. 
Figure 7-21 illustrates implicit and explicit bus ownership due to an internal bus request 
being generated. 
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IMPLICIT EXPLICIT 
OWNERSHIP OWNERSHIP 





ALTERNATE 


Figure 7-21. Three-Wire Implicit and Explicit Bus Ownership 


In Figure 7-21, the alternate master has ownership of the external bus during C1 and C2. 

In C3, the alternate master releases control of the bus and the external arbiter asserts bus 
grant (BG) to the MCF5307 processor. During C4 and C5, the MCF5307 device is implicit: 
owner because an internal access is not pending. In C5, an internal bus request becomes 
pending, causing the MCF5307 device to take explicit ownership of the bus in Clock 6 (C6) 
by asserting BR and BD. In Clock 7 (C7), the alternate master removes the bus grant to 

the MCF5307 device. The MCF5307 processor does not relinquish the bus (the MCF5307 
continues to assert BD) until the end of the transfer. 
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NOTE 


The MCF5307 processor can start a transfer during the CLK 
cycle after BG is asserted. The external arbiter should not 
assert BG to the MCF5307 processor until the previous 
alternate master has stopped driving the bus. BG cannot be 
asserted while another alternate master transfer is still in 
progress or damage to the part could occur. 





ALTERNATE 
MASTER 


MCF5307_ 


Figure 7-22. Three-Wire Bus Arbitration with External to Master Control Bit 
Asserted | | 
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In Figure 7-22, the alternate master is owner of the external bus during C1 and C2. During 
C2, the MCF5307 processor requests the external bus because of a pending internal 
transfer. On Clock C3, the alternate master relinquishes control of the bus and the 
external arbiter grants the bus to the MCF5307 device by asserting BG. At this point, there 
is an internal access pending so the MCF5307 device asserts BD during Clock C4, and 
begins the access. Thus, the MCF5307 processor becomes the explicit master of the 
external bus. Also during C4, the external arbiter removes the grant from the MCF5307 
processor by negating BG. Because the MCF5307 device is the current bus master, it 
continues to assert BD until the current transfer has completed. Because BG is negated, 
the MCF5307 device negates BD during C9 and three-states the external bus, thereby 
passing ownership of the external bus to an alternate master. 


BR can be used by the external arbiter as an indication that the MCF5307 processor 
needs the bus. However, there is no guarantee that when the bus is granted to the 
MCF5307 processor that a bus cycle will be performed. At best, BR must be used as a 
status output that indicates when the MCF5307 processor needs the bus, but not as an 

indication that the MCF5307 processor is in a certain bus arbitration state. 





Figure 7-23 is a high-level bus arbitration state diagram for the MCF5307 bus arbitration 
protocol, which can be used by external arbiters to predict how the MCF5307 processor 
operates as a function of external signals. Table 7-10 lists conditions that cause a change 
to and from the various states. Table 7-11 describes the MCF5307 bus ownership, bus 
driving, and assertion of BD for each state of the bus arbitration state machine. 
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Figure 7-23. MCF5307 Three-Wire Bus Arbitration Protocol State Diagram 


Table 7-10. MCF5307 Three-Wire Bus Arbitration Protocol Transition Conditions 


SOFTWARE INTERNAL 
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Table 7-10. MCF5307 Three-Wire Bus Arbitration Protocol Transition Conditions 


Explicit Own 


Implicit Own 
Explicit Own 





1)“N” means negated; “A” means asserted; “AM” means alternate master. 2)End of Cycle: Whatever terminates a bus 
transaction whether it is normal or bus error. Note that bus cycles that result from a burst inhibited transfer are 
considered part of that original transfer. 3)IBR refers to an internal bus request.The output signals BR is a registered 
version of IBR when BG is negated and BD is negated. There is an internal bus request when the ColdFire core 
requires the external bus for an operand transfer 


Table 7-11. MCF5307 Three-Wire Arbitration Protocol State Diagram 


| _stave~—s| ~—sowN_—s|_—_smussTaTus: «| = BDC 
Reset [No | Not Driven | Negeted 


The MCF5307 processor can be in any one of four arbitration states during bus operation: 
reset, alternate master own, implicit ownership, and explicit ownership. 








The reset state is entered whenever RSTI or software watchdog reset is asserted in any 
bus arbitration state. When RSTI and the software watchdog reset are negated, the 
MCF5307 processor proceeds to the implicit ownership state or alternate master 
ownership state, depending on BG. : 





The alternate master ownership state denotes the MCF5307 processor does not have 
ownership (BG negated) of the bus and the MCF5307 device does not drive the bus. The 
MCF5307 device can assert memory control signals (i.e., CS[7:0], WE[3:0], RAS[1:0] or 
CAS[3:0]) TA and BR during this state. 





The implicit ownership state indicates that the MCF5307 device owns the bus because BG 
is asserted to it. The MCF5307 device, however, is not ready to begin a bus cycle, and it 
keeps the bus three-stated until an internal bus request occurs. 


The MCF5307 processor explicitly owns the bus when the bus is granted to it (BG 
asserted) and at least one bus cycle has initiated. The MCF5307 device asserts BD in this 
state to indicate that it has explicit ownership of the bus. Until BG is negated, the 
MCF5307 device regains explicit ownership of the bus whether or not active bus cycles 
are being executed. Once BG is negated, the MCF5307 processor will relinquish the bus 
at the end of the current bus cycle. When it is ready to relinquish the bus, the MCF5307 
processor negates BD and three-states the bus signals. 


You can use the bus arbitration state diagram for the MCF5307 three-wire bus arbitration 
protocol to approximate the high-level behavior of the MCF5307 device. It is assumed that 
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all TS or AS signals in a system are tied together and each bus master’s BD and BR 
signals are connected individually to the external bus arbiter. The external bus arbiter 
must make sure any alternate bus master has relinquished the bus or will be relinquishing 
the bus after the next rising edge of CLK before asserting BG to the MCF5307 processor. 
The MCF5307 does not monitor external bus master operation regarding bus arbitration. 


NOTE 


The MCF5307 processor can start a transfer on the rising 
edge of CLK the cycle after BG is asserted. The external 
arbiter should not assert BG to the MCF5307 processor until 
the previous alternate master has stopped driving the bus. BG 
cannot be asserted while another alternate master transfer is 
still in progress or damage to the part could occur. 


7.8 RESET OPERATION 


The MCF5307 processor supports two types of reset: the external master reset input 
(RSTI), which resets the entire MCF5307 device (including the internal PLL module), and 
the Software Watchdog reset, which resets everything except the internal PLL module. 


7.8.1 MASTER RESET 


To perform a master reset, an external device asserts the reset input pin (RSTI). When 
power is applied to the system, external circuitry should assert RSTI for a minimum of six 
CLKIN cycles after Vcc is within tolerance. Figure 7-24 is a functional timing diagram of 
the master reset operation, illustrating relationships among Vcc, RSTI, mode selects, and 
bus signals. CLKIN must be stable by the time Vcc reaches the minimum operating 
specification. CLKIN should start oscillating as Vcc is ramped up to clear out contention 
internal to the MCF5307 processor caused by the random manner in which internal flip- 
flops power up. RSTI is internally synchronized for two CLKINs before being used and 
must meet the specified setup and hold times to CLKIN only if recognition by a specific 
CLKIN rising edge is required. 
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T = 32 
CLKIN CYCLES 


T>=22 
CLKINCYCLES | 


| | | 
CLKIN | | | | | | | | | 
| 22-5 | | | 
VCC | | | | | | | 
| | | | | | 
| | 
| 


T>=6 
CLKIN CYCLES 


a | | | | | j : ) , 
—_ | | | | 
RSTO | | | | | | | 


DATA AL LLL LLL LLL _\ LLL K 


8) 


BUS SIGNALS | | | | | | 


BD | 


Figure 7-24. Master Reset Timing 


During the master reset period, all signals that can be are driven to a high-impedance 
state and all those that cannot are driven to their negated states. Once RSTI negates, all 
bus signals continue to remain in a high-impedance state until the MCF5307 device is 
granted the bus and the ColdFire core begins the first bus cycle for reset exception 
processing. A master reset causes any bus cycle (including DRAM refresh cycles) to 
terminate. In addition, master reset initializes registers appropriately for a reset exception. 


7.8.2 SOFTWARE WATCHDOG RESET 


The software watchdog reset is performed anytime the executing software does not 
provide the correct write data sequence with the enable-control bit set. This reset helps 
prevent runaway software or nonterminated bus cycles. Figure 7-25 is a functional timing 
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diagram of the software watchdog reset operation, illustrating relationships among RSTO 
and bus signals. 
| 


T >= 22 
BCLKO CYCLES | 


T=32 
BCLKO CYCLES 


BR 





| | | | | | 


BD l l l 


Figure 7-25. Software Watchdog Reset Timing 


During the software watchdog reset period, all signals that can be are driven to a high- 
impedance state and all those that cannot are driven to their negated states. Once RSTO 
negates, all bus signals continue to remain in a high-impedance state until the MCF5307 
device is granted the bus and the ColdFire core begins the first bus cycle for reset 
exception processing. 
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SECTION 8 
SYSTEM INTEGRATION MODULE 


8.1 INTRODUCTION 


This section details the operation and programming model of the System Integration Module 
(SIM) registers, including the interrupt controller and system-protection functions for the 
MCF5307 device. The SIM provides overall control of the internal and external buses and 
serves as the interface between the ColdFire core processor and the internal peripherals or 
external devices. The SIM also configures the parallel port and enables the CPU STOP 
instruction. 


8.1.1 Features 





The following is a list of the key SIM features: 


e Module Base Address Register (MBAR) 
— Base address location of all internal peripherals and SIM resources 
— Address space masking to internal peripherals and SIM resources 
e Interrupt Controller 
— Programmable interrupt level (1-7) for internal peripheral interrupts 
— Programmable priority level (0-3) within each interrupt level 
— Four external interrupts; one set to interrupt level 7; three others with primary and 
secondary interrupt levels 
e System Protection and Reset Status 
— Reset status to indicate cause of last reset 
-— Software watchdog timer with optional secondary bus monitor functionality 
e Phase Locked Loop Clock Control Register for CPU STOP instruction (PLLCR) 
— Control for turning off clocks to core and interrupt levels that turn clocks back on. 


¢ Bus Arbitration Control Register (MPARkK) 


— Controls default bus master after arbitration 
— Enables display of internal accesses on the external bus for debug 


e Parallel Port Pin Assignment Register (PAR) 
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8.2 PROGRAMMING MODEL 
8.2.1 SIM Registers Memory Map 


Table 8-1 shows the memory map of all the SIM registers. The internal registers in the 
SIM are memory-mapped registers offset from the MBAR address pointer. The following 
list addresses several key notes regarding the programming model table: | 


e You can access the Module Base Address Register in supervisor mode only using 
the MOVEC instruction with an Re value of $COF. 


Table 8-1. SIM Memory Map 






MBAR $000[ System Control Fieg | ASR | SYPCR | _SWIVA_| _SWSA 

MBAR + $004 Reserved 
MBAR + $008 
MBAR + $00C 


MBAR+S§00[ Reserved 
MBAR+S014[ SSCS 












MBAR + $018 
MBAR + $01C 
MBAR + $020 
MBAR + $024 
MBAR + $028 


MBAR+ S020] SSCS 

MBAR+$080[ 

MBAR+8084[ SS SS—~wdS 

MBAR+6088[ ——SSCSCSCSC~S~S~S 

MBAR+S080[—SSSC~S 

MBAR + $040 | Interrupt PendingReg | _—=SCS~SCSPSS 
MBAR +$044 | __InferruptMaskRleg [SSCS 


MBAR + $048 
MBAR + $040 
MBAR + $050 
MBAR + $054 


8.3 SIM PROGRAMMING AND CONFIGURATION 
8.3.1 Module Base Address Register (MBAR) 


The MBAR determines the base address of all internal peripherals as well as the definition 
of access types allowed for these registers. | 


The MBAR is a 32-bit write-only supervisor control register that physically resides in the 
SIM. It is accessed in the CPU address space $COF via the MOVEC instruction. (Refer to 
the ColdFire Family Programmer's Reference Manual Rev. 1.0 for use of MOVEC 
instruction). The MBAR can be read when in Debug mode using background debug 
commands. 
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At system reset, the MBAR valid bit is cleared to prevent incorrect references to resources 
before the MBAR is written. The remainder of the MBAR bits are uninitialized. To access 
the internal peripherals, you should write MBAR with the appropriate base address and 
set the valid bit after system reset. 


All internal peripheral registers occupy a single relocatable memory block along 1-kbyte 
boundaries. If the MBAR valid bit is set, the base address field is compared to the upper 
22 bits of the full 32-bit internal address to determine if an internal peripheral is being 

accessed. The MBAR masks specific address spaces using the address space fields. Any 
attempt to access a masked address space will generate an access on the external bus. 


8.3.2 Module Base Address Register (MBAR) 


The MBAR determines the base address location of all internal module resources such 
as registers as well as the definition of the types of accesses that are allowed for these 
resources. 


The MBAR is a 32-bit write-only supervisor control register that physically resides in the 
SIM. It is accessed in the CPU address space $COF via the MOVEC instruction. (Refer to 
the ColdFire Family Programmer's Reference Manual Rev. 1.0 for use of MOVEC 
instruction). 7 





At system reset, the MBAR valid bit is cleared to prevent incorrect references to resources 
before the MBAR is written. The remainder of the MBAR bits are uninitialized. The MBAR 
can be written to when in Background Debug Mode (BDM). To access the internal 

modules, MBAR should be written with the appropriate base address after system reset. 


All internal peripheral registers occupy a single relocatable memory block along 4Kbyte 
boundaries. If the MBAR valid bit is set, the base address field is compared to the upper 
20 bits of the full 32-bit internal address to determine if an internal peripheral is being 
accessed. The MBAR masks specific address spaces using the address space fields. Any 
attempt to access a masked address space will result in an access being generated on 
the external bus. 


Module Base Address Register(MBAR) | 
31 30 29 28 27 26 , 25 24 23 22 21 20 19 18 17 16 





HESEt: 





RESET: 


Module Base Address Register 
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BAI31: 12] - Base Address 
This we defines the base address fot a minimum 4Kbyte address range. 


WP, AM, SC, Sp. C/l, UC and UD - CPU/IACK Mask Bits 


SC - Mask Supervisor Code space in address range 

SD - Mask Supervisor Data space in address range 
UC - Mask User Code space in address range 

UD - Mask User Data space in address range 

C/l - Mask CPU Space and Interrupt Acknowledge Cycle 


This field masks specific address spaces, placing the MBAR mapped registers in a 
specific address space or spaces. If an address space mask bit is cleared, an access to 
a location in that address space can activate the corresponding MBAR mapped register. 
lf an address space mask bit is set, an access to a location in that address space becomes 
a regular external bus access. 


The address space mask bits are: 


WP - Write Protect 
This bit is the mask bit for write cycles in the MBAR-mapped a address range. 


O = module address range is read/write 
1 = module address range is read only 


AM - Alternate Master Mask 


When AM=0 and an alternate master actually accesses the MBAR mapped registers; SC, 
SD, UC, and UD are “don't cares” in the address decode. 


For each address space mask bit (AM, C/I, SC, SD, UC, UD): 


0 = Do not mask this address space for MBAR mapped register. Allow access to 
these registers. 

1 = Mask this address space from the chip-select activation. Disallow access to these 
registers; this forces transfer to become a regular external bus cycle. 


~V- Valid 
This bit defines when the base address is valid: © 


0 = Contents of MBAR are not valid 
1= Contents of MBAR are valid 


The following example shows how to set the MBAR to location $10000000 using the DO 


register. In the example, a “1” in the least significant bit validates the MBAR location. The 
example assumes all accesses are valid: 
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move.l1 #$10000001,D0 
movec DO,MBAR 
8.3.3 Interrupt Controller 


The SIM provides a centralized interrupt controller for all MCF5307 interrupt sources, 
which includes: 


e External interrupts 

¢ Software watchdog timer 
e Timer modules 

e MBUS module 

e UART modules 

¢ DMA module 


8.3.4 Interrupt Registers (ICR[11:0], IPR, IMR, AVR, and IRQPAR) 


All interrupt sources have their own ICR, as shown in the location and the description of 
each ICR is detailed in Table 8-2. There are four external interrupt pins with seven possible 
external interrupts settings at a fixed interrupt level and priority. The IRQ PAR register 
determines these settings. You can program the external interrupts to supply an autovec- 
tor or run an external interrupt acknowledge cycle. Refer to the Autovector Control Reg- 
ister (AVR). | 





Table 8-2. Interrupt Control Register Memory Map 


MBAR+$04C_ | ICRO | 68 | 
MBAR + S04>_[ Tort [8 
[MBAR S00e [tore |_| 
wan soaF [iors | 8 
[wean soso | ioRe [8 
[—waa-sosi_[ iors | 6 
[wean 3052 [oR | 8 

el 
om 
a 
coms 
ea 


SWT 


NBUS 
UART 
UART 2 


Internal interrupts are programmed to a level and priority. All internal interrupts have a 
unique Interrupt Control Register. There are 35 possible priority levels, including internal 
and external interrupts. 
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ree a a 
RESET: . 
0 - - 0 0 0 0 0 


Interrupt Control Register 


AVEC - Autovector Enable 


This bit determines whether the interrupt-acknowledge cycle abut (for the internal 
interrupt level indicated in IL[2:0] for each interrupt) requires an autovector response. 


AVEC = QO; Interrupting source returns vector during interrupt-acknowledge cycle 
AVEC = 1; SIM generates auto vector during interrupt acknowledge cycle 


IL[2:0] - Interrupt Level 
These bits indicate the piers level assigned to each interrupt input. 


IP[1:0] - Interrupt Priority 
These bits indicate the interrupt priority within the interrupt level asvignnicnt 





IP[1] = 0; Lower priority than external interrupt at this level 
IP[1] = 1; Higher priority than external interrupt at this level 
IP[O] = 0; Lower priority than internal interrupt at this level with same IP[1] 
IP[O] = 1; Higher priority than internal interrupt at this level with same IP[1] 
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Table 8-3. Interrupt Priority Scheme 













INTERRUPT 
LEVEL 


REG 


He 
— 
N 
(o>) 
toed 








111 


111 
111 
110 


110 
110 
101 
101 


—h fp ok] ok ae — 
OO; CO}; © — _ 
oO; —}; — oO — 





INTERNAL MODULE ICR 


beeen ae 

ets cod 

eee cel 

i eee 

Pes eS sce) 

RO! ee ee 

ae Este 

ae leas anal 

eae a eet 

fcc ae ae 

| 0 a 

Led eee 

{00 [1 | 0] Inieral Wodls ne 

P= [= ial nth Pin RO ear 
7 ntemal Modo aa 
a} eral ls es 
1] eral Module 4 
[9 rtemal Media seas 
pon | | = | External Interrupt Pin IRQ3 oa 
Irena Medio —— 
[3 tral dls meee 
[erat Mode mane 2a 
9} eral Module — 
pon | | = | External Interrupt Pin IRQ1 ss ae 
CT] ntsnal Mode om aa 
8] ral ede —— aaa 
gor | 1] 1a Module aac aes 

To [ toma odio 4 
= = or tert Pin TAT a se 
IT Ina Modif oan 
e071 | 00 | Intel Module a 







INTERRUPT SOURCE 


EXTERNAL INTERRUPT PAR REG 


IRQPAR[2] | IRQPAR[1] | IRQPAR[O] 





: 





| ———Tnternal Module Module 


Internal Module 
External Interrupt Pin IRQ7 


External Interrupt Pin IRQ3 
Internal Module 
Internal Module 
Internal Module 
External Interrupt Pin IRQ5 


Internal Module 
Internal Module 
Internal Module 












Note: Motorola recommends that you not assign multiple internal modules to the same 





interrupt level and same interrupt priority when configuring the ICR registers. 


AVEC[7:1] - Auto Vector Control 
These bits determine whether the external interrupt at that level is auto vectored. 


AVECx = 0; Interrupting source returns vector during interrupt-acknowledge cycle 
AVECx = 1; SIM generates auto vector during interrupt-acknowledge cycle 


MOTOROLA MCF5307 User’s Manual 8-7 


SYSTEM INTEGRATION MODULE 


BLK - Block address strobe (AS) for external AVEC access. 
BLK = 0; Do not block 
BLK = 1; Block address strobe 


7 6 5 4 3 2 1 0 


RESET: 
0 0 0 0 0 0 0 0 


Autovector Control Register (AVR) 


IM[16:1] - Interrupt Mask 


Each bit corresponds to an interrupt source defined by the Interrupt Control Register (ICR) 
or Autovector Register (AVR). You mask an interrupt by setting the corresponding bit in 
the IMR. At system reset, all defined bits are initialized to a logic one. 


31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 
A Mae Ra CS CE 


RESET: 








1 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
CTC UC CC OC 
RESET: . 

1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 


Interrupt Mask Register (IMR) 


IP[16:1] - Interrupt Pending 


Each bit corresponds to an interrupt source defined by the Interrupt Control Register. This 
register contains a registered copy of the interrupt signal the interrupting source 
generates. The corresponding bit in this register reflects the state of the interrupt signal 
even if the corresponding mask bit is set. The IPR is a read-only longword register. 
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1 = The corresponding interrupt source has an interrupt pending 
O = The corresponding interrupt source does not have an interrupt pending 


31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 
FE Se ee ee ee ee ee ee 


RESET: 


15 14 
A1 | DMAO 









DM 





13 12 11 10 9 8 7 6 5 4 3 2 1 0 
UART2| UART1; MBUS uaa TIMER) wr | EINT7 | EINT6; EINTS| EINT4 | EINT3) EINT2) EINT1 a 


RESET: 


Interrupt Pending Register 


8.3.4.1 INTERRUPT ASSIGNMENT REGISTER (IRQPAR). The IRQPAR lets you 
change the level the external interrupts IRQ5, IRQ3, and IRQ1. The setting of the 
IRQPAR[2:0] bits determine the interrupt level the external interrupt pins. 


For example: 


e Note: External [RQ[7] pin is always internal interrupt level 7 

¢ Setting the IRQPARZ2 bit to “1” will set the IRQ[5] pin to internal interrupt level 4 
e Setting the IRQPARZ2 bit to “O” will set the IRQ[5] pin to internal interrupt level 5 
Setting the IRQPAR1 bit to “1” will set the IRQ[3] pin to internal interrupt level 6 
¢ Setting the IRQPAR1 bit to “O” will set the IRQ[3] pin to internal interrupt level 3 
Setting the IRQPARO bit to “1” will set the IRQ[1] pin to internal interrupt level 2 
Setting the IRQPARO bit to “0” will set the IRQ[1] pin to internal interrupt level 1 


Additionally, the IRQPAR2 and IRQPAR1 have been assigned to interrupts so as to allow 
the IRQ5 and IRQ3 external pins to raise priority over each other by becoming IRQ4 and 
IRQ6 internal interrupts, respectively. See the IRQPAR programming model that follows. 


Interrupt Assignment Register (IRQPAR) Address MBAR + $06 


4 


7 6 5 3 2 1 0 
IRQPAR[2] | IRQPAR[1]| IRQPAR[O]| — - oa a ea ae : 
0 0 0 0 0 0 oO 


RESET: 
0 


Interrupt Assignment Register (IRQPAR) 
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IRQPAR[2:0]- Interrupt Port Assignment bits 
Refer to Table 8-4. 


Table 8-4. Signals Selected with IRQPAR 


EXTERNAL PIN 
IRQPAR IRQPAR=0 IRQPAR=1 CONNECTION 


TinGPARIa | IR) | mows) PROT 
Pinarany [Rats —[ Rate 
irararioy | mean | moa [Rom 


8.3.5 System Protection And Reset Status 


8.3.5.1 RESET STATUS REGISTER (RSR). The RSR contains a bit for each reset 
source to the SIM. A bit set to 1 indicates the last type of reset that occurred. The RSR is 
updated by the reset control logic when the reset is complete. Only one bit will be set at 
any one time in the RSR. The register will reflect the cause of the most recent reset. If a 
reset occurs and you have failed to clear this register, reset control logic will clear any 
uncleared bits and set the bit for the correct cause of reset. You clear a bit by writing a 
one to that bit location; writing a zero has no effect. The illustration that follows shows the 
RSR programming model. 









The RSR is an 8-bit supervisor read-write register. 


Reset Status Register(RSR) Address MBAR + $000 
7 6 5 4 3 2 a 0 
=a [Mee cet io ed cae 
RESET: 
1/0 0 1/0 0 0 0 0 0 


Reset Status Register (RSR) 


HRST - Hard Reset or System Reset 


1 = An external device driving RSTI caused the last reset. Assertion of reset by an 
external device causes the core processor to take a reset exception. All registers 
in internal peripherals and the SIM are reset. 


SWTR - Software Watchdog Timer Reset 


1 = The last reset was caused by the software watchdog timer. If SWRI in the SYPCR 
is set and the software watchdog timer times out, a hard reset occurs. 


8.3.5.2 SOFTWARE WATCHDOG TIMER (SWT). The software watchdog timer 
prevents system lockup should the software become trapped in loops with no controlled 
exit. The SWT can be enabled or disabled via the SWE bit in the SYPCR. If enabled, the 
SWT requires the execution of a software watchdog servicing sequence periodically. If 
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this periodic servicing action does not occur, the SWT times out resulting in a SWT IRQ 
or hardware reset, as programmed by the SWRI bit in the SYPCR. If the SWT times out 
and SWTA enable bit is set, the SWT IRQ will assert. If after another timeout, the SWT 
IACK cycle has not occurred, the SWT TA signal will assert in an attempt to terminate the 
bus cycle and allow IACK cycle to proceed. The setting of the SWTAVAL flag bit in the 
SYCPR register indicates that the SWT TA signal was asserted. Figure 8-2 visually 
depicts the SWTA functionality when terminating a locked bus. 


CODE IN SWT INTERRUPT HANDLER POLLS THE 
SWTAVAL BIT IN THE SYPCR TO DETERMINE 
CODE ENABLES SWT INTERRUPT AND WHETHER OR NOT SWT TA WAS NEEDED. 
SWTA FUNCTIONALITY BY WRITING SYPCR IF SO, EXECUTE CODE TO IDENTIFY BAD ADDRESS 
I ! | I I I 


<q——pe| PROBLEM: l arr 
| 1.SWTTIMES-OUT DUE TO UN-TERMINATED BUS | | 


| | eee NOTE: RECOMMEND THAT SWT IRQ_| | | 
BE SET TO THE HIGHEST LEVEL IN THE SYSTEM. 


SWT IRQ * | | [ [ 
| | swrtimeout | | | | 
| | | | | | 
I | l | | [ 
| | 2. UNABLE TO SERVICE SWT INTERRUPT DUE TO “HUNG BUS _ | 
| | CYCLE. WAIT ANOTHER SWT TIMEOUT BEFORE ASSERTING SW). | 
| 

| | | 
| 3. HELD UNTIL ANOTHER 

| | BUS CYCLE STARTS | 

| | 

SWTTA* | | PO eee | ) | 

'  SWT TIMEOUT 

| | l | | 

| [ [ | 1 

| | 

SWTAVAL # | | | | | 

(BIT6 IN SYPCR 
>| | 
I i | 1 I | 
*. SWT IRQ AND SWT IRQ ARE ACTIVE-LOW 
# -SWTAVAL IS SET TO ‘1’ IF SWT TA SIGNAL ASSERTED SWT IACK CYCLE 


Figure 8-1. MCF5307 Embedded System Recovery from Unterminated Access 


When the SWT times out and SWRI register bit is programmed for a hardware reset, an 
internal reset will be asserted, and the SWTR register bit will be set in the RSR. 


To prevent SWT from interrupting or resetting, you must service the SWSR register. The 
SWT service sequence consists of the following steps: 

1. Write $55 to SWSR 

2. Write $AA to the SWSR 


Both writes must occur in the order listed prior to the SWT timeout, but any number of 
instructions or accesses to the SWSR can be executed between the two writes. This order 
allows interrupts and exceptions to occur, if necessary, between the two writes. 
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Be careful when changing SYPCR values after the SWT has been enabled with the 
setting of the SWE register bit as it is difficult to determine the state of the SWT while 
running. The SWP and SWT[1:0] bits in SYPCR determine the SWT timeout period. Note 
that a function of the SWT[1:0] and SWP registers data is compared against the SWT 
timer versus the timer being “pre-loaded” with some particular-countdown value 
determined by the SWP and SWT[1:0] bits. If you want to change one of these values in 
the SYPCR, take the following steps: 


1. Disable SWT by writing a 0 to the SWE bit in SYPCR. 

2. Service the SWSR, write $55, then write $AA to SWSR. This action resets the 
counter. 

3. Re-write new SWT[1:0] and SWP values to SYPCR register. 

4. Re-enable SWT by writing a 1 to SWE bit in SYPCR. You can do this in step 3. 


8.3.5.3 SYSTEM PROTECTION CONTROL REGISTER (SYPCR). The SYPCR 
controls the software watchdog timer, timeout periods, and software watchdog timer 
transfer acknowledge. 


The SYPCR is an 8-bit supervisor read-write register. The register can be read at any 
time, but can be written only if the SWT isn’t pending. At system reset, the software 
watchdog timer is disabled 


System Protection Control Register(SYPCR): Address MBAR + $01 
3 1 


rar SWRI are SwT[1] | SwTfo] | SWTA | SWTAVAL ka 


ae 


System Protection Control Register (SYPCR) 


SWE - Software Watchdog Enable 


0 = SWT disabled 
1 = SWT enabled 


ne - Software Watchdog Reset/Interrupt Select 


= If SWT timeout occurs, SWT generates an interrupt to the core processor at the 
level programmed into the IL bits of ICRO (see Table 8-2.). 
1 = SWT causes soft reset to be asserted for all modules of the part except for the 
PLL (reset mode selects, such as PP_RESET_SEL or chip-select settings, 
should not change). 


SWP - Software Watchdog Prescalar 


0 = SWT clock not prescaled 
1 = SWT clock prescaled — a value of 512 
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SWT[1:0] - Software Watchdog Timing Delay 
These bits (along with the SWP bit) select the timeout period for the SWT as shown in 
Table 8-5. At system reset, the software watchdog timer is set to the minimum time- 
out period. 





Table 8-5. SWT Timeout Period 


swe | swiivor | _SwrtmeourPenoo 
ee 
eff sr Feaney 
pe rome Ferey 
a 
—7 
















2°0 / System Frequency 
222 / System Frequency 
2247 System Frequency 








If the SWP and SWT bits are modified to select a new soft- 
ware timeout, you must peform the software service sequence 
($55 followed by $AA written to the SWSR) before the new 
timeout period takes effect. 


SWTA - Software Watchdog Transfer Acknowledge Enable 
0 = SWTA Transfer Acknowledge disabled 
1 = SWTA Assert Transfer Acknowledge enabled. After 1 SWT timeout period of the 
unacknowledged assertion of the SWT interrupt, the Software Watchdog Trans- 
fer Acknowledge will assert, which allows SWT to terminate a bus cycle and al- 
low the [ACK to occur 


SWTAVAL - Software Watchdog Transfer Acknowledge Valid 


0 = SWTA Transfer Acknowledge has NOT occurred 
1 = SWTA Transfer Acknowledge has occurred. Write a 1 to clear this flag bit 


8.3.5.4 SOFTWARE WATCHDOG INTERRUPT VECTOR REGISTER (SWIVR). The 
SWIVR contains the 8-bit interrupt vector the SIM returns during an interrupt- 
acknowledge cycle in response to a SWT-generated interrupt. The following register 
illustrates the SWIVR programming model. | 
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The SWIVR is an 8-bit Supervisor write-only register. This register is set to the uninitialized 
vector $0F at system reset. 


Software Watchdog Interrupt Vector Register(SWIVR) Address MBAR + $002 
7 6 5 4 3 2 1 0 





Software Watchdog Interrupt Vector Register (SWIVR) 


8.3.5.5 SOFTWARE WATCHDOG SERVICE REGISTER (SWSR). The SWSR is where 
the SWT servicing sequence should be written. To prevent an SWT timeout, you should 
write a $55 followed by a $AA to this register. Both writes must be performed in the order 
listed prior to the SWT timeout, but any number of instructions or accesses to the SWSR 
can be executed between the two writes. If the SWT has already timed out, writing to this 
register will have no effect in negating the SWT interrupt. The following register illustrates 
the SWSR programming model. 


The SWSR is an 8-bit supervisor write-only register. At system reset, the contents of 
SWSR are uninitialized. 


- Software Watchdog Service Register(SWSR) Address MBAR + $003 
vé 6 5 4 3 2 1 0 





RESET: 





Software Watchdog Service Register (SWSR) 


8.3.6 Phase-Locked- -Loop Clock Control for CPU STOP Instruction 


8.3.6.1 PHASE-LOCKED LOOP CONTROL REGISTER (PLLCR). The ENBSTOP bit 
must be set to 1 in order for the ColdFire CPU STOP instruction to be acknowledged. After 
reset, this bit will be cleared to O and must be set to 1 for the MCF5307 to enter low-power 
modes. Only clocks to the core processor are turned off because of the CPU STOP 
instruction. All internal modules remain clocked and can generate interrupts to restart the 
ColdFire core. 


The PLLCR control register bits PLLIPL[2:0] determine the minimum level at which an 
interrupt (decoded as an Interrupt Priority Level or IPL) must occur to awaken the PLL. 
The PLL will then turn clocks back on to the core processor and interrupt exception 
processing will take place. 


Table 8-6 outlines settings of PLLIPL[2:0] to be compared against the interrupt ranges that 
awaken the core processor from a CPU STOP instruction. 
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The PLLCR is an 8-bit supervisor read/write register. 


PLL Control Register (PLLCR) Address MBAR + $08 


7 6 5 4 3 2 4 0 
ENBSTOP | PLLIPL{2] | PLLIPL[1] | PLLIPL[o] ee Wee tee de Oe 
0 0 0 0 0 0 0 0 





RESET: 


PLL Control Register (PLLCR) 


ENBSTOP- Enable CPU STOP instruction 


0 = ENBSTOP disabled 
0 = ENBSTOP enabled, STOP instruction will turn off clocks to the ColdFire core 


PLLIPL[2:0]- PLL Interrupt Priority Level to awaken from CPU STOP 
Refer to Table 8-6. 


Table 8-6. Settings of PLLIPL[2:0] and Interrupts that Awaken Core om 


eee 7 
are ae : 
















Interrupts[7:5] 
io riorupit7 
rior 


No interrupts will awaken core 


8.3.7 Bus Arbitration Control 


8.3.7.1 DEFAULT BUS MASTER REGISTER (MPARK). The MPARK determines the 
Default Bus Master internal bus arbitration. Additionally, the MPARK configures internal 
to external arbitration for internal transfers. Table 8-7 discusses the MPARK bit encoding. 
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The MPARK is an 8-bit read-write register. 


Default Bus Master Register (MPARK): Address MBAR + $0C 


7 6 5 4 3 2 { 0 
PARK[1]|PARK[0]| IARBCTRL|EARBCTRL | SHOWDATA he ee ed 
0 0 0 0 0 0 0 


RESET: 
0 


Default Bus Master Register (MPARK) 


The IARBCTRL bit controls access for external masters to the MCF5307 internal bus. 


In a single master system, the IARBCTRL bit should remain cleared (0), disabling inter- 
nal arbitration by external masters. In this scenario, the PARK[1:0] bits will only apply to 
the priority of internal masters over one another. Note that the internal DMA (master 3) 

has a higher priority over the ColdFire core (master 2) if the internal DMA has its band- 
width BWC[2:0] bits set to O00 (maximum bandwidth). 





In multiple master systems that expect to use internal resources like the DRAM controller 
or chip-selects, internal arbitration should be enabled by setting IARBCTRL to 1. Addi- 
tionally, the PARK[1:0] bits must be set to 00 to make the external master the highest pri- 
ority master. This prevents a potential locked bus situation. This condition arises when 
the EARBCTRL is set to 1 and an external master attempts to gain access to the internal 
bus. Unfortunately, the external master will lose arbitration because it is not the highest 
priority bus master (PARK[1:0] not set to 00). Meanwhile, an internal master of higher pri- 
ority tries to run an external bus cycle; however the external arbitration logic will not issue 
the BG signal to the MCF5307 causing the internal bus master to wait indefinitely. In situ- 
ations where the internal resources of the DRAM controller or chip-selects aren’t needed 
by the external master, the IARBCTRL bit may be cleared to 0 and the PARK[1:0] can 
then be set to values that apply to the priority of the internal masters only. 


The EARBCTRL bit determines whether or not the internal bus masters, core processor 
and internal DMA, will have to arbitrate for the external bus for transfers that hit internal 
register spaces (MBAR+register offset). 


In a single master system, having the EARBCTRL bit set or cleared has no impact on 
performance from an arbitration standpoint. It is likely that the system designer has the 
BG signal tied low, wherein the MCF5307 device always owns the externals bus and 
internal register transfers are going to the external bus already. In a system where the 
MCF5307 device is the only master, this bit may remain cleared to 0. If the system needs 
external visibility of the internal register transfers data bus values (for system debug pur- 
poses) then both EARBCTRL and the SHOWDAITA bits must both be set to 1. When an 
internal register transfer is driven externally it is important to note that the XTA signal 
becomes an output which is asserted (normally an input). To prevent external devices 
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and memories from responding to internal register transfers that go to the external bus, 
the AS signal and all chip-select-related strobe signals will not assert. 


In multiple master-systems, disabling arbitration with the EARBCTRL bit will allow perfor- 
mance improvement because internal register bus transfer cycles aren’t interfering with 
the external bus. Having internal transfers go external hurts performance in two possible 
ways. If the internal master doesn’t get the bus right away, the core is stalled until it wins 
arbitration of the external bus; or if the core does win the arbitration instantly, it may kick 
the external master off the external bus unnecessarily for a transfer that didn’t need the 
external bus in the first place. For debug, the EARBCTRL and SHOWDATIA bits can be 
set to 1, to gain external visibility of the internal bus cycles where this performance pen- 


alty isn’t a concern. 





Table 8-7. Default Bus Master Selected with PARK[1:0] 


ee ee 
30 | Faron ata mt tra BA) 
















Table 8-8. Park on Master 1 Priority (PARK[1:0] = 00) 


ne 


Table 8-9. Park on Alternate Master 2 Priority (PARK[1:0] = 01) 


MASTER NUMBER PRIORITY BUS MASTER NAME 


pT Highest | Highest - GoldFireCore ~~ 
ie a ea a 
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Table 8-10. Park on Alternate Master 3 Priority (PARK[1:0] = 10) 


ar 


Table 8-11. Park on Current Master Priority (PARK[1:0] = 11) 


Park on Current Master Note: When using the park on cur- 
rent master setting, the first master to arbitrate for the bus be- 
comes the current master. The corresponding priority scheme 
should be interpreted as the priority of the next current master 
once the current master finishes. 


























Important Note: PARK[1:0] must be set to 00 and IARBTRL 
must be set to 1 if external masters are using internal resourc- 
es like the DRAM controller or chip selects. 


Additional Note: The Internal DMA (master 3) will have high- 
er priority than the ColdFire Core (master 2) if the internal 
DMA has its bandwidth BWC[2:0] bits set to 000 (maximum 
bandwidth). 


IARBCTRL - External to internal bus arbitration enable. 


0 = Arbitration disabled — 
1 = Arbitration enabled 


EARBCTRL - Enable internal register memory space to external bus arbitration. 


0 = Arbitration disabled — 
1 = Arbitration enabled 


EARBCTRL Note: Internal register memory space is considered all registers mapped off 
the MBAR (MBAR+offset registers). These include the programming models for the SIM, 
DMA, Chip Selects, Timers, UART, I2C, Parallel Port, etc.). It is important to note that 
these registers don’t include the MBAR itself- only the core can access the MBAR. 
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SHOWDATA - Enable to drive Internal register data bus to external bus. 
Note: The EARBCTRL bit must be set to 1 for this function to work. 


0 = Don’t drive internal register data bus values to external bus 
1 = Drive internal register data bus values to external bus 





8.3.8 Parallel Port Pin Assignment Register (PAR) 


8.3.8.1 PIN ASSIGNMENT REGISTER (PAR). The PAR lets you select certain signal 
pin assignments. You can select between upper addresses, transfer in progress, DMA 
requests, transfer modifier, and transfer type or the parallel port signals. The following 
register illustrates the PAR programming model. Table 8-12 describes which bits in PAR 
to write for a particular output parallel port setting. The PAR register is 16 bits wide. 


IMPORTANT NOTE: The system designer controls the reset value of this register by 

driving the external data bus bit 4 (Data[4]) with a 1 or 0 when the RSTI (Reset input to 

MCF5307) negates. The logic level on Data[4] pin that is latched at negation of RSTI is 

loaded into all bit positions of PP_LRESET_SEL. The system is configured as PP[15:0] if 

Data[4] is 0; otherwise alternate pin functions selected by PAR=1 will be used. This value 

may be driven with a weak pullup or pulldown resistor. /8 


Pin Assignment Register(PAR) Address MBAR + $004 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


PAR15|PAR14;PAR13] PAR12}; PAR11}PAR10} PARQ | PAR8/| PAR7 | PAR6 | PARS | PAR4 | PAR3 | PAR2| PAR1 {| PARO 


RESET: PP_RESET_SEL 0/1 
0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 





Parallel Port Pin Assignment Register (PAR) 
Table 8-12. Signals Selected with PAR 


ran | eamce [eat 
ADORED 
ADDS 
ADDR 
ADORE 
sDORA 
[Pare [ pre [Aon 
ADDR 
BRO 
BREA 
me 
mw 
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Table 8-12. Signals Selected with PAR (Continued) 


ean [eae [ame 
[pare [ Peto [Ft 
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SECTION 9 
CHIP-SELECT MODULE 


9.1 INTRODUCTION 


This section details the specification of the Chip-Select Module (CS) for the MCF5307 
device. The Chip-Select Module provides user-programmable control of the eight chip- 
select outputs, four byte/byte-write enable outputs, and one output-enable signal. 


This section also addresses the operation and programming model of the CS registers, 
including the Chip-Select Address, Mask and Control Registers. 


9.1.1 Features 
The following list summarizes the key chip-select features: 


¢ Eight chip select signals; two with programmable addresses (CSO and CS1); six with 
fixed offset from a programmable base address 


e Address masking for memory block sizes from 64K to 2G for CSO and CS1 
e Fixed memory block sizes of 2M for CS2-CS7 

e Programmable wait states and port sizes 

e External master access to chip-selects 


9.2 CHIP-SELECT SIGNALS 


The MCF5307 device provides eight programmable chip-selects that can directly interface 
with SRAM, EPROM, EEPROM, and peripherals. 


9.2.1 Chip-Selects - (CS[7:0]) 


You can program each chip-select for an address location as well as for masking 
capabilities, port size and burst-capability indication, wait-state generation, and internal/ 
external termination. A reset disables all chip-selects. CS[0] is also unique because it can 
function at reset as a global chip-select that allows you to select boot ROM at any defined 
address space. CS[0] is the only chip-select initialized out of reset. Port size and termination 
(internal vs. external) for CS[0] are configured by the levels on D[7:0] when RSTI negates. 


9.2.2 Output Enable - (OE) 


This signal is sent to the interfacing memory and/or peripheral to enable a read transfer. It 
is asserted and negated on the falling edge of the clock. This signal is asserted only when 
there is a match of one of the chip-select for the current address decode. 





MOTOROLA MCF5307 User’s Manual 9-1 





CHIP-SELECT (CS) MODULE 


9.2.3 Byte Enables/Byte Write Enables - (BE[3:0]/BWE[3:0]) 


The four byte-enable pins are multiplexed with the byte-write-enable pins of the MCF5307 
device. You can program each of these four multiplexed pins through the Chip-Select 
Control Register on an individual chip-select basis. 


These generated signals provide byte data select signals, which are decoded from the SIZx 
A1 and AO signals in addition to the programmed port size and burstability of the memory 
being accessed, as shown in Table 9-1. 


Table 9-1. Data Bus Byte Write Enable Signals 


TRANSFER SIZE | PORT SIZE BURST 


Disabled 
Enabled 
Disabled 





Enabled 


_ Disabled 


Sen ee, i Oe 
ae Oa a CO De 
[oes alec Tee | 
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Table pee Data Bus Byte Write Enable Signals 


es Lee 
TRANSFER SIZE pone SIZE jsunsr | at pjs1:24j| oj2a:t6)| (15:8) | y7:0) 

















Disabled Lt 
See ee ee oe 


8-bit 
Enabled 
Word 


Disabled 
Enabled 
Disabled 

32-bit 
Enabled 


Le 
iw 
La 
es 
po 
Le 
es 
=o 
po 
i 
Le 
Lt 
po 
Disabled 
Laie 
= 
po 
Lea 
eas 
heal 
0 | 
a 
mi 
to 
—- 
oo 


8-bit 
Enabled 
Longword 


Disabled 
16-bit 
Enabled 


Disabled 
sont |_Disabled_ 
Enabled 
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Table 9-1. Data Bus Byte Write Enable Signals 
TRANSFER SIZE | PORT SIZE BURST | Bweo | ewei | ewer | Ewes | 
aA nan Ee Sr cae ara DI7:0 


Disabled 


Enabled 


16-bit 
9.3 CHIP-SELECT OPERATION 
9.3.1 Chip-Select Module 


The Chip-Select Module provides a glueless interface to many types of external memory. 
The Chip-Select Module includes the needed external control signals to interface to SRAM, 
PROM, EPROM, EEPROM, FLASH and peripherals. 





Each of the eight chip-select outputs has an associated mask register and control register. 
Chip-Selects (CSO and CS1) 


e Have individual 16-bit base address registers 
¢ Have individual 32-bit mask register which provide for 16-bit address masking. 


¢ Have individual 16-bit control register which provides port size and burst capability in- 
dication, wait state generation, and automatic acknowledge generation features. 


Chip-Selects (CS2 through CS7) 


¢ All have a common 8-bit base address register (CSBAR) 


e Each has a 16-bit control register which provides port size and burst capability indica- 
tion, wait state generation, and automatic acknowledge generation features. 


e Each has a 32-bit mask register which provides for the selection of specific address 
space accesses. 


e Address blocks for each chip select is 2MB. 
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Chip-select 0 provides special functionality. It is a “global” chip-select after reset and 
provides relocatable boot ROM capability. You can program CSO, CS1 and CS7 to assert 
during specific CPU space accesses such as interrupt-acknowledge cycles. 


9.3.1.1 GENERAL CHIP-SELECT OPERATION. The general-purpose chip-selects are 
controlled by the Chip-Select Mask Register (CSMR), the Chip-Select Control Register 
(CSCR), and by the Chip-Select Address Registers (CSAR & CSBAR). There is one CSMR 
and one CSCR for each of the chip-selects (CS0-CS7). 


Chip-select CSO and CS1 have individual CSAR. Chip-selects CS2-CS7 use a common 
base address register (CSBAR). 


Chip-Selects CSO and CS1 


e The chip-select address register controls the base address space of the chip-select. 


e The chip-select mask register controls the memory block size and addressing attributes 
of the chip-select. 


e The chip-select control register programs the features of the chip-select signals. 


Chip-Selects CS2-CS7 


e The chip-select base address register CSBAR defines the base address for chip-se- 
lects 2 through 7. 


e The individual chip-select mask registers control the addressing attributes of the chip- 
select. 


e The individual chip-select control registers program the assertion features of the chip- 
select signals. 


The MCF5307 processor will compare the address and mask in chip-select 0 - 7 control 
registers. If the address and attributes do not match in a single chip-select register, the 
MCF5307 will run an external bus cycle with external termination on a 32-bit port with burst- 
inhibited transfers. Should an address and attribute match in multiple chip-select registers, 
the matching chip-select signals will be driven; however, the MCF5307 will run an external 
bus cycle with external termination on a 32-bit port with burst-inhibited transfers. Table 9-2 
shows the type of access depending on what matches are made in the CS control registers. 


Table 9-2. Accesses by Matches in CS Control Registers 


NUMBER OF CHIP SELECTS 
REGISTER MATCHES TYPE OF ACCESS 


External! 


As defined by chip select control 
register 
Mattipte | Externat'® 





1. Forthe cases represented in the table, EXTERNAL refers to an external bus cycle with external termination 
on a 32-bit port with burst-inhibited transfers 


2. For the case of multiple chip selects matching, all of the matching chip selects will be asserted even though 
external termination will be required as defined in NOTE 1. 
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9.3.1.1.1 8-, 16-, and 32-Bit Port Sizing. The general-purpose chip-selects support static 
bus sizing. You can program the size of the port controlled by a chip-select. Defined 8-bit 
‘ports are connected to data bus bits 31:24, defined 16-bit ports are connected to data bus 
bits 31:16, and defined 32-bit ports are connected to data bus bits 31:0. The port size is 
specified by the PS bits in the CSCR. Figure 9-1 illustrates the byte lanes that external chip 
select memory should be connected to. | 

















snr 5188.16 
oe ee 
p 

16-BIT PORT 

8-BIT PORT 


Figure 9-1. Connections for External Memory Port Sizes 


9.3.2 Global Chip-Select Operation 


CSO is the global (boot) chip-select and as such, allows address decoding for boot ROM 
before system initialization occurs. Its operation differs from the other external chip-select 
outputs following a system reset. | 


After system reset, CSO is asserted for every external access. Internal accesses can be 
made to go external by setting IARBCTRL bit of the MPARK register in the SIM. Refer to the 
Default Bus Master Register (MPARK) section for more information. No other chip-select 
should be used while CSO is a global chip-select. CSO operates in this manner until the valid 
bit is set in CSMRO, at which point CS7-CS1 may be used. At reset, the port size and 
automatic acknowledge functions of the global chip-select are determined by the logic levels 
of the inputs on the D[7:5] signals. 


The reset values of AA, PS1, and PSO in CSCRO are determined by the logic levels driven 
on D[7:5] at the rising edge of XRSTI. Table 9-3 shows how the logic levels of D[7:5] 
correspond to the port sizes and enable/disable auto acknowledge for CSO. 
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Table 9-3. D[6] and D[5] Selection of CSO Port Size 


BOOT CSO PORT 
SIZE 


oe | ae 
eo [aero 
[2 [sepa 


Table 9-4. D[7] Selection of CSO Automatic Acknowledge 


D[7] BOOT CSO AA 

















Ao Disabled 
Enabled with 15 wait states 


Provided the required address range is first loaded into CSAR, CSO can be programmed to 
continue to decode for a range of addresses after the V-bit is set. After the V-bit is set for 
CSO, global chip-select can be restored only with another system reset. 


9.4 PROGRAMMING MODEL 
9.4.1 Chip-Select Registers Memory Map 9 


Table 9-5 below shows the memory map of all the chip-select registers. 
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Table 9-5. Memory Map of Chip-Select Registers 
ADDRESS | NAME | WIDTH DESCRIPTION RESET VALU ACCESS 
MBAR+$080 | CSARO Nee Chip-Select Address Register - Bank 0 uninitialized 


MBAR+$084 | CSMRO 


MBAR+$08A | CSCRO 


MBAR+$08C 


MBAR+$090 


MBAR+$096 


MBAR+$098 


MBAR+$9C 


MBAR+$0A2 


MBAR+$0A4 


MBAR+$AA 


MBAR+$0AE 


MBAR+$0B0 


MBAR+$0B6 


MBAR+$0BA 


MBAR+$0BC 


MBAR+$0C2 


MBAR+$0C6 


MBAR+$0C8 


MBAR+$0CE 


MBAR+$0D2 


MBAR+$0D4 


MBAR+$0DA 


9-8 


CSMR1 
CSCR1 


CSBAR 


CSMR2 


CSCR2 


CSMR3 


CSCR3 


CSMR4 


CSCR4 


CSMR5 


CSCR5 


CSMR6 


CSCR6 


CSMR7 


16 
32 


16 


16 


16 


32 


16 


16 


32 


16 


16 


Go 


2 


16 


16 


ie) 


2 


16 


16 


32 


16 





Chip-Select Mask Register - Bank 0 






Chip-Select Control Register - Bank 0 


: 
Chip-Select Address Register - Bank 1 


Chip-Select Mask Register - Bank 1 


Chip-Select Control Register - Bank 1 


Chip-Select Base Address Register - Banks 2- RW 
; uninitialized 
Chip-Select Mask Register - Bank 2 (except V=0) R/W 


Chip-Select Control Register - Bank 2 


uninitialized 
(except V=0) Bh 


BEM=1; 
BSTR=BSTW=0; 


AA-DI7 - PS1=D{6]; 
PSO= : 
WS3=WS2=WS1=WS0= 


uninitialized 


uninitialized 

(except V=0) my 

joxcen R 
EM=BSTR=BSTW=0) 

uninitialized 


except 
EM=BSTR=BSTW-=0) 


uninitialized 
Chip-Select Mask Register - Bank 3 (except V=0) R/W 


Chip-Select Control Register - Bank 3 


Reserved! 


uninitialized 
Chip-Select Mask Register - Bank 4 (except V=0) R/W 
uninitialized 
Chip-Select Control Register - Bank 4 (except R/W 
EM=BSTR=BSTW2=0) 


Reserved! 


Chip-Select Mask Register - Bank 5 


Chip-Select Control Register - Bank 5 


Reserved! 


Chip-Select Mask Register - Bank 6 


Chip-Select Control Register - Bank 6 


Reserved! 


Chip-Select Mask Register - Bank 7 


alle 
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uninitialized 
Geile 
EM=BSTR=BSTW=0) 


BY) 
= 


BEGBEGE 


uninitialized 
(except V=0 bk 


uninitialized 
except 
EM=BSTR=BSTW=0) 


uninitialized 

(except V=0 aN 

uninitialized 

age. R/W 
EM=BSTR=BSTWS50) 

uninitialized 

(except V=0 


MOTOROLA 


CHIP-SELECT (CS) MODULE 


Table 9-5. Memory Map of Chip-Select Registers (Continued) 


ADDRESS | ADDRESS | NAME | WIDTH DESCRIPTION RESET VALUE ACCESS 


eee 
MBAR+$0DE | CSCR7 Chip-Select Control Register - Bank 7 
SES STR =BSTW=0) 


1. Addresses not assigned to a register and undefined register bits are reserved for future expansion. Write 
accesses to these reserved address spaces and reserved register bits have no effect. 

2. The reset value column indicates the register initial value at reset. Certain registers may be uninitialized upon 
reset, i.e., they may contain random values. 

3. The access column indicates whether the corresponding register allows both read/write functionality (R/W), 
read-only functionality (R), or write-only functionality (W). A read access to a write-only register will return zeros. 
A write access to a read-only register will have no effect. 





9.4.2 Chip-Select Module Registers 


9.4.2.1 CHIP-SELECT ADDRESS REGISTER (CSARO, CSAR1 AND CSBAR). Each 
CSAR and CSBAR determines the base address of the corresponding chip-select pin. 
CSARO and CSAR1 determine the base addresses from which chip-selects 0 and 1 will be 
offset, respectively. CSBAR determines the base address from which chip-selects 2 through 
7 will be offset. 


e CSARO and CSAR1 are 16-bit read/write registers. CSBAR is a 8-bit read/write register. 
The value stored in each CSAR register corresponds to A[31:16]. The value stored in 
the CSBAR register corresponds to A[31:24]. 9 


e CSARO, CSAR1 and CSBAR are uninitialized by reset 





Chip Select Address Register for CSO - CST 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 


BA31 | BA30 | BA29 | BA28 | BA27 | BA26 | BA25| BA24| BA23| BA22| BA21| BA20} BA19 


RESET. 





BA31-BA16 - Base Address 


This field defines the base address location of memory dedicated to chip select CSO and 
CS1. These bits are compared to bits 31-16 on the internal core address bus to determine 
if the chip-select memory is being accessed. 


Chip Select Base Address Register(CSBAR) for CS2 - CS7 
5 4 2 


| BA31 | BA30 | BA29 } BA28 | BA27 | BA26 |} BA25 | BA24 
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BA31-BA24 - Base Address 


This field defines the base address location of memory dedicated to chip-selects CS2 
through CS7. These bits are compared to bits 31-24 on the internal core address bus to 
determine if the chip-select memory is being accessed. 


For chip-selects 2-7, only the upper 8 bits are implemented (in CSBAR) allowing for memory 
block sizes of 2M for each chip-select. For chip-selects 2-7, the offset from CSBAR is 
decoded from bits 23-21 on the internal core address bus to determine which chip-select 
signal is being used. SeeTable 9-6 for the chip-select decoding. 


For example, if $FO is written into the Chip-Select Base Register (CSBAR), chip-select 5 will 
be asserted when the address range is from is $FOA00000 to $FOBFFFFF. Chip-select 6 
will be asserted from address range $FOCO0000 to $FODFFFFF. 


Table 9-6. Chip-Select 2-7 Decoding 


CHIP 


of oP ages 
a 
[oft gabe 
of Megabytes 
ot Megabytes 
ine a 
i a ea aly 












2 Megabytes 
2 Megabytes 


* This only applies when the parallel port, PP[15:8], signals are selected on the external pins and an external 

master requires access to the chip select resources. In this case, the internal address bus bits, A[31:24] are all 0. 

To avoid overlap of chip select space, CSBAR should be set to $0, CSARO should be set to $0 and CSAR1 

should be set to $0020. CSMRO and CSMRA1 should be set with the appropriate mask bits such that the 

maximum space is 2M. 
9.4.2.2 CHIP-SELECT MASK REGISTER (CSMR0O - CSMR7). CSMRO and CSMR1 
determine the address mask for CS[0:1], respectively. Also, CSMR[7:0] determines the 
definition of which types of accesses are allowed for these signals. Each CSMR is a 32-bit 
read/write control register that physically resides in the Chip-Select Module. CSMR7 - 
CSMRO are uninitialized by reset, except for bit O (V-bit) which is initialized to 0. Note that 
CPU or IACK space masking is only possible in CSO, CS1 or CS7. For an IACK cycle to 
occur in CS7, CSBAR would have to be set to $FF. 
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Chip Select Mask Register(CSMRO-CSMR1) 
31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 


BAM31|BAM30}BAM29| BAM28)|BAM27| BAM26| BAM25| BAM24] BAM23} BAM22 BAM21| BAM20 BAM19 BAM18 BAM17 BAM14 


RESET: 





15 14 13 12 14 10 9 8 7 6 5 4 3 Z 1 0 
Le eee ee eve ee ee 
RESET: 

r : : : = : - - _ E 2 E : O 


Chip Select Mask Register(CSMR2-CSMR7) 
15 14 13 12 11 10 9 


8 7 6 5 4 3 2 1 0 
pee, ee ee ee ee 
. u sy ‘ r 7 : . - - : ‘ 0 





RESET: 


* This bit (C/I) is not implemented in registers CSMR2 - CSMRé6; it is only implemented in registers CSMRO, CSMR1 and CSMR2. 9 





BAM31-BAM16 - Base Address Mask , 

This field defines the chip-select block size through the use of address mask bits. Any set 
bit masks the corresponding base address register (CSAR) bit (the base address bit 
becomes a don’t care in the decode). 


0 = Corresponding address bit is used in chip select decode 
1 = Corresponding address bit is a don’t care in chip select decode 


The block size for CS[0:1] is equal to 2", where n=(number of bits set in the base address 
mask field of the respective CSMR)+16. The block size for CS[2:7] is equal to 2MB in all 
cases. 


For example, if CSARO was set at $0000 and CSMRO was set at $0008, then chip select 
CSO would address two 64K spaces: from $00000000 to $0000FFFF and from $00080000 
to $0008FFFF. 


WP, AM, C/I, SC, SD, UC, UD - Write Protect, Alternate Master, CPU/IACK, Supervisor 
Code, Supervisor Data, User Code, User Data Address Space Mask 


1. This field masks specific address spaces, placing the chip-select in a specific address 
space or spaces. If an address space mask bit is cleared, an access to a location in 
that address space can activate the corresponding chip-select. If an address space 
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mask bit is set, an access to a location in that address space becomes a regular ex- 
ternal bus access, and no chip-select is activated. 


For each address space mask bit (AM, C/I, SC, SD, UC, UD): 


0 = Do not mask this address space for the chip select. An access using the chip select 
can occur for this address space. 

1 = Mask this address space from the chip select activation. If this address space is ac- 
cessed, no chip select activation will occur on the external cycle. 


The address space mask bits are: 


WP= Write Protect 


The WP bit can restrict write accesses to the address range in a CSAR. An attempt to 
write to the range of addresses specified in a CSAR that has this bit set will result 
in the appropriate chip-select not being selected. 


1 = Only read accesses are allowed 
O = Either read or write accesses are allowed 


AM= Alternate Master mask 


When AM=0 and an alternate master access occurs, SC, SD, UC, and UD are “don’t 
cares” in the chip-select decode. Refer to Bus Arbitration in Section 7 Bus 
Operations section for information on alternate bus masters. | 


C/l = CPU space and Interrupt Acknowledge Cycle mask (CSO, CS1, and CS7) 
SC = Supervisor Code address space mask 

SD = Supervisor Data address space mask 

UC = User Code address space mask 

UD = User Data address space mask 


NOTE 


Even if the C/I bit is set in CSMR[6:2] they will not assert for CPU 
space and IACK cycles. These chip selects will assert for normal 


accesses only. 
V - Valid bit 


The Valid bit indicates that the contents of its address register, mask register, and control 
register are valid. The programmed chip selects do not assert until the V-bit is set (except 
for CSO which acts as the global (boot) chip select - see 9.3.2 Global Chip-Select 
Operation.) A reset clears the V-bit in each CSMR. 


0 = Chip-select invalid 
1 = Chip-select valid 
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9.4.2.3 CHIP-SELECT CONTROL REGISTER (CSCRO - CSCR7). Each CSCR controls 
the auto acknowledge, external master support, port size, burst capability, and activation of 
each of the chip-selects. 


For CSCRi1 - CSCR7, bits BSTR, BSTW, and V are initialized to 0 by reset while all other 
bits are uninitialized by reset. For CSCRO, bits BSTR, BSTW, and V are initialized to 0 by 
reset while bits WSJ[3:0] are initialized to 1 by reset. 


CSO is the global (boot) chip-select and as such, allows address decoding for boot ROM 
before system initialization occurs. Its operation differs from the other external chip-select 


outputs following a system reset. Refer to 9.3.2 Global Chip-Select Operation for more 
information concerning the global chip-select. 


Chip Select Control Register(CSCRO) 


8 7 6 5 4 


1 1 1 - D7] Die) Ds) 1 0 





3 2 1 0 
2h ee een 
0 : . 





15 14 13 12 11 10 9 


8 7 6 5 
= [oss [wee] ve [wee] [me [rm [| wer 
, : : : : : 0 


- 





4 3 2 1 0 
RESET: 
0 0 : : 


WSJ[3:0] - Wait States 


This field defines the number of wait states that will be inserted before an internal transfer 
acknowledge is generated. If the AA bit is set to 0, TA is asserted by the external system 
regardless of the number of wait states generated. In that case the external transfer 
acknowledge will end the cycle. 


BSTR - Burst Read Enable 


This field specifies the read burst capability of the memory associated with each chip- select. 
lf BSTR=1, all reads from port sizes smaller than the requested transfer size will be bursted, 
including longword reads from 8 and 16-bit ports, word reads from 8-bit ports as well as line 
reads from 8-, 16-, and 32-bit ports. If BSTR=0, all reads from port sizes smaller than the 
requested transfer size will be broken into individual reads that are no larger than the 
specified port size. For example, a longword read from an 8-bit port would be broken into 
four individual byte reads. 


O = Break all reads that are larger than the specified port size into individual nonburst 
reads that are no larger than the specified port size 

1 = Allow burst read by chip-selected address space for all reads that are larger than 
the specified port size 


MOTOROLA MCF5307 User’s Manual 9-13 





CHIP-SELECT (CS) MODULE 


BSTW - Burst Write Enable © 


This field specifies the write burst sapability of the memory associated with each chip-select. 
lf BSTW=1, all writes to port sizes smaller than the requested transfer size will be bursted, 
including longword writes to 8 and 16-bit ports, word writes to 8-bit ports as well as line writes 
to 8-, 16-, and 32-bit ports. If BSTW=0, all writes to port sizes smaller than the requested 
transfer size will be broken into individual writes that are no larger than the specified port 
size. For example, a longword write to an 8-bit port would be broken into four individual byte 
writes. 


0 = Break all writes that are larger than the specified port size into individual nonburst 
writes that are no larger than the specified port size 

1 = Allow burst write to chip-selected address space for all writes that are larger than 
the specified port size 


AA - Auto-Acknowledge Enable 


This field controls the assertion of the internal transfer-acknowledge during all accesses that 
hit in the corresponding chip-select address space. If AA=1, the internal transfer- 
acknowledge will be asserted at the time determined by the value of WS[3:0]. If AA=0, the 
Chip-Select Module will not cause the internal transfer acknowledge to be asserted and the 
cycle will have to be terminated by the external system. 


0 = Wait for external transfer acknowledge 
1 = Wait for internal acknowledge specified by WS[3:0] 


PS[1:0] - Port Size 

This field specifies the width of the data associated with each chip-select. It determines 
where data will be driven during write cycles and where data will be sampled during read 
cycles. 


00 = 32-bit port size - Data sampled and driven on D[31:0] 

01 = 8-bit port size - Data sampled and driven on D[31:24] only 
10 = 16-bit port size - Data sampled and driven on D[81:16] only 
11 = 16-bit port size - Data sampled and driven on D[381:16] only 


BEM - Byte Enable Module 


This field specifies the mode of functionality for byte enables. Certain SRAMs have byte 
enables that must be asserted during reads (in addition to writes.) The BEM bit may be set 
in the relevant CSCR to provide the appropriate mode of byte enable in support of these 
SRAMS. The default mode after reset is 0 for CS7 - CS1 and 1 for CSO. 


= B He E signals generated for data reads and writes 
= BWE signals generated for data writes only 


| Note 
Even if selected, BE is not asserted for writes. 
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9.4.2.4 CODE EXAMPLE. The code below provides an example of how to initialize the chip- 
selects. MBARx defines the base of the module address space 


CSARO EQU MBARx+$S080 ;Chip Select 0 address register 
CSMRO EQU MBARx+$084 ;Chip Select 0 mask register 
CSCRO EQU MBARx+S08A ;Chip Select 0 control register 
CSAR1 EQU MBARx+S08C ;Chip Select 1 address register 
CSMR1 EQU MBARx+$090 ;Chip Select 1 mask register 
CSCR1 EQU MBARx+$096 ;Chip Select 1 control register 
CSBAR EQU MBARx+$098 ;Chip Select 2-7 base address register 
CSMR2 EQU MBARx+S09C ;Chip Select 2 mask register 
CSCR2 EQU MBARx+S0A2 ;Chip Select 2 control register 
CSMR3 EQU MBARx+$0A8 ;Chip Select 3 mask register 
CSCR3 EQU MBARX+SOAE ;Chip Select 3 control register 
CSMR4 EQU MBARx+S0B4 ;Chip Select 4 mask register 
CSCR4 EQU MBARx+SOBA ;Chip Select 4 control register 
CSMR5 EQU MBARx+S0CO ;Chip Select 5 mask register 
CSCR5 EQU MBARx+S0C6 ;Chip Select 5 control register 
CSMR6 EQU MBARx+SO0CC ;Chip Select 6 mask register 
CSCR6 EQU MBARx+S0D2 ;Chip Select 6 control register 
CSMR7 EQU MBARx+S0D8 ;Chip Select 7 mask register 
CSCR7 EQU MBARX+SODE ;Chip Select 7 control register 
move.w #$0000,D0 ;CSARO starts at address $00000000 
move.w DO,CSARO ;it is usually best to set up the cscr0 before exiting 
global chip select 
move.w #5S0C18,D0 ;3 wait states, AA = 0, PS = 32-bit 
move.w DO,CSCRO BEM = 0, BURSTREAD = 1, BURSTWRITE = 1; This will exit 
global chip select mode 
move. #$00000001,D0 ;Addresses range from $00000000 to SOOO0OFFFF 
move. DO, CSMRO ; WP,AM,C/I,SC,SD,UC,UD =0; V=1 
move.w #$0001,D0 ;CSAR1 starts at address $00010000 
move.w DO,CSARO 
move.w #S000F0001,D0 ;Addresses range from $00010000 to SOOOFFFFF 
move.w DO,CSMR1 ; WP,AM,C/1I,SC,SD,UC,UD =0; V=1 
move.w #$0C18,D0 ;3 wait states, AA = 0, PS = 32-bit 
move.w  DO,CSCR1 ;BEM = 0, BURSTREAD = 1, BURSTWRITE = 1 
move.w #S0OF00,D0 ;CSBAR addresses $S0OF000000 
move.w DO,CSBAR  £;This is for Chip Selects 2-7 
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9.5 TIMING DIAGRAMS 


Figure 9-2. Chip-Select Module Outputs Timing Diagram 
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SECTION 10 
PARALLEL PORT (GENERAL-PURPOSE I/O) 


10.1 INTRODUCTION 


This subsection describes the operation and programming model of the parallel port 
registers and the direction-control data registers. 


10.2 SIGNAL DESCRIPTIONS 


The MCF5307 parallel port module has 16 signals that you can select as inputs or outputs 
on apin-by-pin basis. These pins are multiplexed with the upper address pins A[31:24], TIP, 
DREQ[1:0], and TM[2:0], and TT[1:0] pins. The Pin Assignment Register (PAR) defines how 
these pins function (see Table 10-1). 


For example, if address pins A[25:0] were needed for external addressing, you can 
configure the remaining pins (PP[15:10]/A[31:26]) for general-purpose I/O. Note that PP[7:0] 
are multiplexed with the TIP, DREQ[1:0], TM[2:0], and TT[1:0]. PP[15:8] are multiplexed 
with A[31:24] (see Table 10-1). 





Table 10-1 lists the signals associated with the PAR. The PAR only enables those pins that 
function as parallel I/O and has no other effect on the functionality of the parallel port (such 
as logic levels) or which pins are inputs or outputs. 


Pin Assignment Register(PAR) Address MBAR + $04 
15 14 13 12 11 10 9 8 t 6 5 4 3 2 1 0 





RESET: PP_RESET_SEL 0/1 . 
0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 0/1 


PAR=0 
PARIS | PPii5]) |  £ADDRA1] 
PAR14 PP[14] ADDR{30] 
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Table 10-1: Signals Selected with PAR (Continued) 


Se 
[0 


DREQ[1] 





(A[31 2AYPPI1 5:8]) 


These multiplexed pins can serve as the most significant byte of the address bus or as 
the most significant byte of the parallel port. Programming the Pin Assignment Register 
(PAR) in the System Integration Module (SIM) determines the function of each of these 
eight multiplexed pins. You can program these on a bit-by-bit basis. 


When any of these pins are enabled in the PAR (logic 1), they represent the most 
significant bits of the address bus. As much as 4 Gbytes of memory is available when all 
of these pins are programmed as address signals. 





When any of these pins are disabled in the PAR (logic 0), they represent the most 
significant bits of the parallel port. 


(TIP/PP[7]) 


This multiplexed pin can serve as the transfer in progress output or as one bit of the 
parallel port. Programming the Pin Assignment Register (PAR) in the SIM determines the 
function of this pin. 


This output is asserted to indicate that a bus transfer is in progress and is negated during 
idle bus cycles if the bus is still granted to the processor. Note that TIP is held asserted 
on back-to-back bus cycles. 


DMA Request (DREQ[1:0)/PP[6: 5) 


These multiplexed pins can serve as the DMA request ere or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of each of these three multiplexed pins. The pins are programmable on a bit-by-bit basis. 
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These active-low inputs are asserted by a peripheral device to request an operand 
transfer between that peripheral and memory. 


Transfer Modifier - (TM[2:0]/PP[4:2}) 


These multiplexed pins can serve as the transfer type outputs or as three bits of the 
parallel port. Programming the Pin Assignment Register (PAR) in the SIM determines the 
function of each of these three multiplexed pins, which are programmable on a bit-by-bit 
basis. 


These input signals provide supplemental information for each transfer type (see Table 2- 
4, Transfer Modifier Encodings for TT=00). For emulation transfers, the TM signals 
indicate user or data transfer types (see Table 2-5, Transfer Modifier Encodings for 
TT=10). For CPU space transfers, the TM signals are low (see Table 2-6, Transfer 
Modifier Encodings for TT=11). For interrupt acknowledge transfers, the TM signals carry 
the interrupt level being acknowledged (see Table 2-6). 


Transfer Type - (TT[1:0]/PP[1:0]) 


These multiplexed pins can serve as the transfer type outputs or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SIM determines the function 
of each of these two multiplexed pins. The pins are programmable on a bit-by-bit basis. 


When the MCF5307 is the bus master, it outputs these signals. They indicate the type of 
access for the current bus access. Table 2-3 (Bus Cycle Transfer Type Encoding) shows 
the encoding definitions. | | 


10.3 PARALLEL PORT OPERATION 


10.3.1 PORT A DATA DIRECTION REGISTER (PADDR) | 


The PADDR allows you to select the signal direction of each parallel port signal. The 
PADDR register contains one data direction bit for each parallel port signal. The data 
direction control bits will only affect the direction of the associated pin if you program that 
pin as a general-purpose I/O signal. 











Port A Data Direction Register (PADDR) Address MBAR+$244 

15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
(PADDR) | 

RESET 0 0 0 0 0 0 0 6) 0 0 0 0 0 0 0 0 
Read/Write Supervisor or User Mode 


PADDR[15:0] - Data Direction Bits [15:0] 


For each of the data direction bits, you can select the direction of the signal as follows: 


O = Signal is defined as an input 
1 = Signal is defined as an output 
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10.3.1.1 PORT A DATA REGISTER (PADAT). The parallel port data register reflects 
the current status of the parallel port signals. If you configure a parallel port as an input, 
the value in the register corresponds to the logical voltage present at the pin. If you 
configure the parallel port signal as an output, the value in the register corresponds to the 
logical level driven onto the pin. 


Port A Data Register (PADAT) Address MBAR+$248 

6 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
RESET 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 

Read or Write Supervisor or User Mode 


e Bits inthe PADAT are valid for the pins configured as general-purpose I/O only. If you 
configure a pin to be an output, the logic level shown in the register will be the logic 
level on the corresponding pin. 


e The PADAT has no effect on a pin that is not configured as a general-purpose I/O. 


e You can write to the PADAT register at any time. A write to a bit corresponding to an 
input signal will seemingly have no effect. However, if a pin changes from an input to 
an output, the value most recently written into the PADAT will be the value driven. 


PADAT[15:0] - Parallel Port Data Register Bits[15:0] 


¢ For parallel port signals programmed to outputs: 


— For PADAT read: register bit indicates logical voltage level at the pin 
— For PADAT write: drive indicated logical voltage level onto associated pin 


¢ For parallel port signals programmed to inputs: 


— For PADAT read: register bit indicates current logical voltage level at the pin 
— For PADAT write: has no effect unless pin direction is changed to output 


10.3.1.2 EXAMPLE CODE. The code example that follows demonstrates how to set up 
the parallel port. This example sets PP[7:0] as general-purpose I/O. PP[3:0] are defined 
as inputs and PP[7:4] are defined as outputs. The example assumes that MBAR was 
defined at location $00010000. 


10-4 MCF5307 User’s Manual MOTOROLA 


MBARX EQU 
PAR EQU 
PADDR EKQU 
PADAT EQU 


move. 
movec 


move. 
Move. 
move. 
move. 
move. 
move. 


MOTOROLA 


$00010000 
MBARx+$04 
MBARx+$244 
MBARX+$248 


1 #MBARx , DO 
DO, MBAR 


#SOOFF,DO 
DO, PAR 
#S00FO,D0 
DO, PADDR 
#SA0,D0 
DO, PADAT 


oO ff ze 


PARALLEL PORT 


;Since MBAR is an internal register, MBARx 
;was used as variable for the memory map 


;set up the PAR. PP[7:0] set up as I/O 
;set PP[7:4] as outputs;PP[3:0] as inputs 


;set PP pin 7 and 5, which are outputs, toa 
;logic ‘1’. PP 6 and 4 are logic ‘0’ 
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SECTION 11 
SYNCHRONOUS/ASYNCHRONOUS DRAM 
CONTROLLER MODULE 


11.1 INTRODUCTION 


The Synchronous/Asynchronous DRAM Controller (SADRAMC) module provides for 
glueless integration of DRAM with the ColdFire product. 


11.2 FEATURES 
The key features of the DRAM controller include: 


Support for 2 banks of DRAM 

Support for External Masters 

Programmable Wait States and Refresh Timer 
Support for Page Mode 

Support for 8-, 16-, and 32-bit wide DRAM banks 
Support for EDO DRAMs 

Support for synchronous DRAMs 


11.3 BLOCK DIAGRAM 


The basic blocks of the DRAM Controller are shown in Figure 11-1. A brief description of all 
the blocks follows. 
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DRAM CONTROLLER MODULE 
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DCAS/DSDQM 
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DMA 
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| 

| 


INTERNAL-BUS 


Figure 11-1. DRAM Controller Block Diagram Bank Register Blocks 


The SADRAMC consists of two banks, each of which contains an associated Register 
Block. The registers are accessed as memory locations. The register information is 
passed on to the Hit Logic. 
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11.3.1 Refresh Register Block 


This block contains data to control refresh operation of the DRAM Controller. All refresh 
for all banks will be controlled by the same register bits and refreshed concurrently. 


11.3.2 Refresh Counter 


This block contains the counter that determines when refresh should take place. It 
generates a refresh request to the control block 


11.3.3 Hit Logic 


The Hit Logic is responsible for comparing the address and attribute signals from the 
requested location to the register information to determine if a DRAM bank is being 
accessed. If a match occurs, the Hit Logic passes this hit to the Control Logic block along 
with the characteristics of the bus cycle to be generated. This is or’ed at the Control Logic 
with information from the other bank to determine what the bus cycle characteristics are. 


11.3.4 Control Logic and State Machine 


This block is responsible for generating RAS, CAS, and DRAM/RW signals. It takes the 
bus cycle characteristic data from the bank logic, along with hit information to generate 
accesses to DRAM. It is also responsible for taking refresh requests from the refresh 
counter to generate CAS before RAS refresh. 


11.3.5 Page Hit Logic | | 
This block is responsible for determining if the next access is within the same DRAM page 
as the previous access. This information is passed on to the control logic. | 
11.3.6 Address Mux 


This block multiplexes the addresses to allow column addresses to be driven on the same 
pins as the row addresses. This allows glueless interface to DRAMs. 


11.4 SIGNAL LIST 


The following DRAM signals provide a seamless interface to external DRAM. DRAM 
widths of 8-, 16-, and 32- bits are supported and can access as much as 256 MBytes of 
memory. 


11.4.1 Row Address Strobes - (RAS[1:0]) 


These active-low pins provide a seamless interface to Row Address Strobe inputs on 
industry standard DRAMs. These pins provide RAS for a given DRAM bank. Banks 
correspond to specific Base Address and Control information programmed in the DCM 
registers (see Section 11DRAM Controller for a description). RAS[0] corresponds to 
bank 0 and RASJ1] corresponds to Bank 1. 
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11.4.2 Column Address Strobes - (CAS[3:0]) 


These active-low pins provide a seamless interface to Column Address Strobe inputs on 
industry standard DRAMs. These provide CAS for a given DRAM bank. CAS[3:0] controls 
access to the most significant to least significant byte of data, respectively. 


11.4.3 DRAM Read/Write - (DRAMW) 
This active-low pin is asserted to signify that a DRAM write cycle is underway. 


11.4.4 Synchronous DRAM Column Address Strobe - (SCAS) 


This active-low output signal is registered during synchronous mode to route directly to 
the SCAS signal of SDRAMs. 


11.4.5 Synchronous DRAM Row Address Strobe - (SRAS) 


This active-low output signal is registered during synchronous mode to route directly to 
the SRAS signal of external SDRAMs. 


11.4.6 Synchronous DRAM Clock Enable - (SCKE) 


This active high output signal is registered during synchronous mode to route directly to 
the SCKE signal of external SDRAMs | 








11.4.7 Synchronous Edge Select - (EDGESEL) 


This input signal helps select additional output hold time for signals that interface to 
external SDRAMs. 





This signal can provide three modes of operation for the SDRAM interface signals. When 
this signal is tied high, the interface signals to the SDRAM will change on the rising edge 
of the clock (BCLKO). When this signal is tied low, the interface signals to the SDRAM will 
change on the falling edge of the clock (BCLKO). When this signal is tied to the SDRAM 
clock, the interface signals to the SDRAM will change on the rising edge of the SDRAM 

— clock. The various configurations of this signal can provide additional output hold time for 
the interface signals provided to the SDRAM. 


11.4.7.1 Edge Select Output Cell. While the MCF5307 specs SDRAM with a 
glueless interface, as shown in Figure 11-2, a special I/O module has been developed to 
ease the system level timings. This output interface cell monitors the clock at the input to 
the SDRAM and holds data until the next edge of the bus clock, adding required output 
hold time to the address, data and control signals. The buffer shown is optional, but may 
be required in some instances where additional clock delay is needed. 


To generate the needed timing required to interface to SDRAMs, the address, data and 
control signals required for the SDRAM interface are clocked through a two stage shift 
register. The first stage is clocked on the rising edge of the bus clock (BCLKO) and the 
second stage is clocked on the falling edge. This method allows the signal to be available 
for up to an additional half bus clock cycle, as shown in Figure 11-3, of which only a small 
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MCF5307 SDRAM 
ADDR 
DATA 
DRAS/DSDQM 


BCLKO 
EDGESEL 





Figure 11-2. MCF5307 SDRAM Interface 


percentage is deeded to insure proper timing is met. A feedback path was added to 
control which of the flipflops is driving the external pin. Using the clock signal feeding the 
SDRAM as the feedback signal insures that data is held until after the falling edge of the 
SDRAM clock input signal by a minimum specified by spec B16, EDGESEL to Invalid 
(hold). This also insures minimum delay unchanging to valid data or the next SDRAM 
clock cycle. 


INTERNAL 
SDRAM DATA, a 38 
ADDRESS, AND 
CONTROL SIGNALS FF4 EXTERNAL 
CK SDRAM DATA, 
x fa ADDRESS, AND 
CONTROL SIGNALS 


BCLK FF2 
D Q 
Cd cK 


SDRAM_ACCESS > 
< En EDGESEL 


Figure 11-3. Edge-Select Cell 
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Figure 11-4. Edge-Select Cell Output Waveforms 
11.5 ASYNCHRONOUS OPERATION 


The SADRAMC has two major modes of operation. One is asynchronous operation which 
includes Page mode and EDO mode. The other is synchronous mode, which is designed 
to work with industry standard SDRAMs. These two modes act very different, and cause 
different use of the memory map and the pins. Both banks of the SADRAMC will be in the 
same mode of operation based on the SO bit in the DCR. 

11.5.1 Asynchronous Memory Map 


The SADRAMC memory map is shown in Table 11-1. The SADRAMC is responsible only 
for decoding the offset from the Module Enable. 


Table 11-1. DRAM Controller Memory Map 














11.5.1.1 DRAM Control Register -DCR. MBAR + $100 
15 14 13 12 1 10 9 8 7 6 5 4 3 2 1 0 
Se 


RESET: 
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This register provides programmable options for the refresh logic as well as the control bit 
to determine if the module is operating with synchronous or asynchronous DRAMs. 


11.5.1.1.1 Synchronous Operation - SO 


This bit determines if the SADRAMC is in synchronous operation mode. For 
asynchronous DRAMs, this bit must be set to zero. Note that once the SADRAMC has 
entered synchronous operation, it cannot be returned to asynchronous operation except 
through a reset of the MCF5307. See subsection 11.6.1.1 


11.5.1.1.2 No Address Multiplexing - NAM 


Some implementations will require external multiplexing support. For instance, if there is 
an external master accessing the DRAM or if a linear addressing scheme is required. In 
these cases, it would be advantageous to prevent the SADRAMC from multiplexing the 
addresses on a DRAM access. If this bit is set, the SADRAMC will not multiplex the 
external address bus to provide column addresses. 


11.5.1.1.3 Refresh RAS Asserted - RRA[1:0] 


These bits determine how long the RAS signal is asserted during a refresh operation. 
Table 11-2 shows the encoding of RRA. 


Table 11-2. RRA Encoding 


a 


11.5.1.1.4 Refresh RAS Precharged - RRP[1:0] 


This field controls how many clocks the RAS signal is precharged after a refresh operation 
before accesses are allowed to DRAM. Table 11-3 shows the encoding for RRP. 


Table 11-3. RRP Encoding 


eee :0] RAS eee ee ee ctl 














3 Clocks 
4 Clocks 
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11.5.1.1.5 Refresh Count - RC[8:0] 


This field controls the frequency of refresh performed by the SADRAMC. One i is added to 
the value stored in these register locations and multiplied by 16 bus clocks to determine 
the refresh period. This allows the refresh period to range from 16 to 8192 bus clocks. This 
will accommodate both standard and low-power DRAMs with bus clock operation from 
less than 2MHz to greater than 50MHz. 


11.5.1.2 Address & Control Registers - DACRO & DACR1 


MBAR+$108, 110. 


31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 


RESET: 


15 14 13 12 14 10 9 8 7 6 5 4 3 2 1 0 
RE [And [S| AP ANON] AOD | Asad] EDO[ rs | M [ And 
RESET: 

0 


These registers contain the base address compare value and the control bits for both 
banks 0 and 1 of the DRAM controller. Address and timing are also controlled by bits in 
the DACRx registers. Care must be taken to ensure that the memory areas defined for 
each bank are unique and do not overlap. In the event the two banks should have a 
common memory area, operation is undefined for accesses in the overlapping region. 


11.5.1.2.1 Base Address Register - BA[31:18] 


These register bits are used in conjunction with the BAM bits in the DCMR to determine 
the address range in which the associated bank of DRAM will be located. Each bit in the 
Base Address Register is compared with the corresponding address of the bus cycle in 
progress. If each bit matches, or if bits that do not match are masked in the BAM, the 
address selects the associated bank’s DRAM block. 


11.5.1.2.2 Refresh Enable - RE 


This bit determines if the SADRAMC will generate a refresh cycle to the associated DRAM 
bank. Table 11-4 shows the encoding of the RE bit. This bit is reset to zero to ensure that 


the refresh function is Glsavled’: at reset. The contents of DRAM are not preserved during 
RESET. 


Table 11-4. RE Encoding 


ee ee Do Not Refresh Associated DRAM Bank 


Refresh Associated DRAM Bank 
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11.5.1.2.3 Column Address Strobe Timing - CAS[1:0] 


These bits determine how long the CAS signal is asserted during a DRAM access. Table 
11-5 shows the encoding of the CAS bits. 


Table 11-5. CAS Encoding 


CAS[1:0] _ # OF SYSTEM CLOCKS CAS ACTIVE 


0 





1 


11.5.1.2.4 Row Address Strobe Precharge Timing - RP[1:0] 


These two bits determine how long the RAS signal is Eigereder between accesses. 
Table 11-6 shows the encoding of the RP bits. 


Table 11-6. RAS Precharge (RP) Encoding 


| RPO] # OF SYSTEM CLOCKS RAS PRECHARGED 


i ee ee 
a a ee 
a 
11.5.1.2.5 RAS Negate to CAS Negate - RNCN 


This signal controls whether RAS and CAS are negated concurrently or one clock apart. 
Encoding of the RNCN is described in Table 11-7. This bit is ignored if CAS is asserted 

for only one clock. In this case RAS and CAS will be negated concurrently. This bit is only 
used for non-page mode accesses and single accesses in page mode. 


Table 11-7. RNCN Encoding 


a re RAS Negated Concurrently with CAS 
a RAS Negated One Clock Before CAS 
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11.5. 1 .2.6 RAS to CAS Delay - RCD 


This bit determines the number of system clocks belween the assertion of RAS and the 
assertion of CAS. Operation of the RCD bit is shown in Table 11-8. 


Table 11-8. RCD Encoding 


Reo # OF SYSTEM CLOCKS BETWEEN RAS AND 
CAS 





11.5.1.2.7 Extended Data Out - EDO 


This register bit determines if the associated bank of DRAM operates in a mode to take 
advantage of industry standard EDO DRAMs. The EDO register encoding is shown below 
in Table 11-9. 


Table 11-9. EDO Encoding 


a ae EDO Operation Disabled 
ae EDO Operation Enabled 


11.5.1.2.8 Port Size - PS 


These two bits will determine the port size of the associated bank of DRAM. This will allow 
for dynamic sizing of the associated accesses. Table 11-10 shows the encoding of the PS 
bits. Note that both 11 and 10 decode to a 16-bit port. 


Table 11-10. PS Encoding 


PS[1:0] PORT SIZE | 


8-Bit Port 
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11.5.1.2.9 Page Mode - PM 


These two bits determine if the DRAM bank supports page mode operation, and if so, to 
what level. Table 11-11 shows the encoding of the PM bits. 


Table 11-11. PM Encoding a, 


a eae 
Se 












Continuous Page Mode 


11.5.1.3 DRAM Controller Mask Registers - DMRO & DMR1 MBAR+$10C,114. 





18 17 16 
RESET: 
ee end ee re ee es Te or 


RESET: 


0 
These registers contain bits to mask off the compare function for addresses as well as to ro 
control response to certain Transfer Type/Transfer Modifier combinations. 


11.5.1.3.1 Base Address Mask - BAM[31:18] 


This register bits are provided to allow the user to mask or “don’t care” the associated bit 
in the Base Address (BA) register. If the bit is zero, the associated address is ignored to 
generate the DRAM hit. This lets you connect various size DRAMs to the SADRAMC. The 
function of each BAM bit is summarized in Table 11-12. 


Table 11-12. Base Address Mask Encoding 


le ed ten oe en ce ne 


Associate Address Bit Is PT” Hedecigte Madeseehie Conmarcd RDRAM ER In DRAM Hit 
Associated Address Bit Is Ignored In DRAM Hit 
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11.5.1.3.2 Write Protect - WP 


This bit determines if the associated bank of DRAM is write protected. If the bit is set, write 
accesses to the block of memory space occupied by the DRAM bank will be ignored by 
~ the DRAM Controller. Table 11-13 summarizes the WP bit operation. 


Table 11-13. WP Encoding 


oa ae Allow Write Accesses 
Ignore Write Accesses 


11.5.1.3.3 Address Modifier Masks - C/l, AM, SC, SD, UC, UD 


These bits allow the associated type of access to be allowed to access DRAM. Table 11- 
14 shows the definition of the bits. If the bit is one, the associated access type is ignored. 
If the bit is zero, the associated access type is allowed to hit in the DRAM space. Table 
11-15 summarizes the function of each bit. 











Table 11-14. Address Modifier Bit Definitions 


ADDRESS 
MODIFIER BIT ASSOCIATED ACCESS TYPE 


Pot | er Sas eames 
ee 
ee 




















Table "1 -15. Address Modifier Bit Encoding 


ADDRESS 
MODIFIER BIT FUNCTION 


ce Allow Access Type To Hit is DRAM 
Do Not Allow Access Type to Hit In DRAM 


11.5.1.3.4 Valid -V 


This bit is set to show that the registers that control the associated bank of DRAM have 
been initialized, an that the DRAM Controller can begin to decode DRAM accesses. Table 
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11-16 shows the encoding of the V bit. This bit is reset to zero to assure that DRAM banks 
are not erroneously decoded at reset. 


Table 11-16. Valid Bit Encoding 


FUNCTION 


Do Not Decode DRAM Accesses 
Registers Valid -- Decode Accesses 


11.5.2 Asynchronous Operation 


The SADRAMC provides a high level of functionality and flexibility, and at the same time 
remaining cost efficient and simple. There are 4 basic modes of asynchronous operation 
of the SADRAMC: 





e Nonpage Mode 

e Burst-Page Mode 

e Continuous-Page Mode 
e Extended Data-Out Mode 


11.5.2.1 General Operation Guidelines. The SADRAMC provides control for the 

DRAM signals RAS, CAS, and DRAMR/W, as well as muxing the addresses, and 

providing bus cycle termination. The exact contro! of the signals and termination are 

determined by the mode of operation. The muxing scheme remains the same for all ee 
modes of operation, reducing the complexity of the muxing function. The address muxing 

scheme is shown in Table 11-17. 


Table 11-17. Address Muxing Scheme 
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Table 11-17. Address Muxing Scheme (Continued) 


| eae PIN Eee od ADDRESS eee eee ADDRESS 





This muxing scheme allows various sized memories of differing width to be connected to 
the address bus. Each combination will have a fixed page size of 512 bytes for page mode 
operations. The addresses will be connected differently for the various size width 
combinations. A summary of how 8-bit, 16-bit, and 32-bit memories are connected to the 
address bus is shown in Table 11-18, Table 11-19, and Table 11-20 respectively. In each 
of these summaries, the Address pin refers to the external processor pin. The Row 
Address refers to the processor address that is valid for the Row Address Strobe. It 
always corresponds to the address pin. The Column Address is the processor address bit 
that is valid on the corresponding address pin when the column address strobe is driven. 
The memory sizes show what DRAM size will be accessed if the corresponding bits are 
connected to the memory. In each case, there is a base memory size. This limitation 
exists to allow simple page-mode muxing. Notice also that Address Pin 17 is treated 
differently in byte-wide operations. 





Table 11-18. DRAM Addressing for Byte-Wide Memories 


ADDRESS PIN ROW ADDRESS COLUMN ADDRESS MEMORY SIZE 
ee 2 Se ee Se 


Base Memory Size of 
256 KB 
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Table 11-18. DRAM Addressing for Byte-Wide Memories (Continued) 


Meee a PIN Pe baiieho lca ADDRESS Lee ee ADDRESS Lee eed SIZE 
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Table 11-20. DRAM Addressing for 32-Bit Wide Memories 


ADDRESS fo od ROW Lae eee | Oe eeetee ADDRESS MEMORY SIZE 


Base meen Size of 64 
K 





In the asynchronous mode, RAS and CAS will always transition at the falling edge of the 
clock. Accesses by external masters will be treated in the SADRAMC the same as internal 
accesses. The operation and timing of each bank of DRAM is controlled by separate 
registers, but refresh is treated the same for both banks. All DRAM accesses should be 
terminated by the SADRAMC. There is no priority encoding between the banks. If the user 
programs the banks to overlap or to overlap with other internal resources, undefined 
behavior may result. 





11.5.2.2 Nonpage Mode-Operation. The simplest operation mode is nonpage mode. In 
this mode, the SADRAMC will provide termination and run a separate bus cycle for each 
transfer of data. Figure 11-5 shows the operation of the non-page mode access. This case 
shows a DRAM read followed by a write. Addresses for a new bus cycle are driven at the 
rising edge of the clock. If there is a hit in the DRAM bank, the associated RAS signal is 
driven at the next falling edge. In this case, with RCD = 0, the address is multiplexed at 
the next rising edge to provide the column address. The required CAS signals are then 
driven at the next falling edge. CAS remains asserted for the period programmed in the 
CAS bits. In this case, RNCN is equal to one, so it is precharged one clock before CAS is 
negated. On a read, data is sampled on the last rising edge of the clock that the CAS 
signal is valid. 





Figure 11-6 shows a variation of the basic cycle. In this case, RCD is 1, so there are two 
clocks between RAS and CAS. Note that the address is multiplexed on the rising clock 
immediately before CAS is asserted. Since RNCN = 0, RAS and CAS are negated at the 
same time. The next bus cycle is initiated, but since the RP bits require RAS to be 
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precharged for two clocks, the RAS is delayed for a clock in the bus cycle. Note that this 
does not delay the address signals, only RAS. 


ADDR 


DRAMR/W 


DATA 





Figure 11-5. Basic Nonpage-Mode Operation RCD=0, RNCN=1 


CLOCK 





ADDR 


DATA 





Figure 11-6. Basic Nonpage-Mode Operation RCD = 1, RNCN =0 


11.5.2.3 Burst Page-Mode Operation. Page mode operation permits optimization of 
memory accesses by allowing the row address to remain registered in the DRAM, while 
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accessing data in different columns. This relieves the necessity to precharge and assert 
RAS with the associated setup and hold times. Therefore, the first bus cycle in the page 
takes the full access time, but subsequent accesses are streamlined. Single accesses 
look the same as non-page mode accesses. 


In the Burst Page Mode, any accesses, byte, word, long word or line, is assumed to reside 
in the same page. In Burst Page Mode, the SADRAMC will generate a burst transfer when 
the operand size is larger than the DRAM bank port size (e.g., line transfer to a 32-bit port, 
longword transfer to an 8-bit port, etc.). The primary cycle asserts RAS and CAS, and the 
subsequent secondary cycles will assert only CAS. At the end of the access, RAS is 
precharged. The addresses will be incremented between cycles. 


Figure 11-7 shows a read access in page mode. In this case, four accesses take place. 
These could be a 32-bit access to an 8-bit port, or a line access to a 32-bit port. Other 
Burst page mode operations may be from 2 to 16 accesses long, depending on the size 
of the access and the port size. In those cases, timing will be similar with more or fewer 
accesses. Figure 11-8 shows the write operation with the same configuration 


CLOCK | | | | | | | | | | | | | | | | | | | | | | | : | | | 



























































ADDR 
RAS | : ! | | | | | 
RcD=-0! + | | | | 
CAS | cas-o1 | || | | | 
DRAMRW ff | | | | | | | 
| | | | | | | 
DATA ! : 
a Figure 11-7. Burst Page-Mode Read Operation 
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CLOCK 


ADDR 








DRAMR/AW 











DATA 





Figure 11-8. Burst Page-Mode Write Operation 


11.5.2.4 Continuous-Page Mode. The SADRAMC incorporates a variation of page 
mode which tries to balance performance, complexity, and size. This is called Continuous 
Page Mode. In typical page mode implementations, the current address is compared with 
the previous address to determine if there is a hit in the DRAM bank. If the bus cycle hits, 
RAS remains asserted and CAS is asserted with the new column address. If there is a 
miss however, the RAS signal must be precharged again before the bus cycle begins. 





Continuous Page Mode is a method to implement the page mode operation without 
requiring an address holding register per bank, as well as to eliminate the need to wait for 
a miss to precharge RAS for the upcoming bus cycle. Since the Internal 5307 Address 
bus implementation is a pipelined bus, addresses for the upcoming bus cycle are often 
available while the current bus cycle is being completed on the bus. Therefore at the end 
of the bus cycle the upcoming address is compared with the current address on the bus 
to determine if the upcoming address hits in the same page. If the access hits, RAS will 
remain asserted. If the next address misses, or there is no access pending, the RAS 
signal will be precharged before the next bus cycle becomes active on the external bus. 
The result is that there should never be a penalty paid for a page miss. Single accesses 
that are not followed by a hit in the page look the same as non-page mode accesses. 


Figure 11-9 shows Continuous Page Mode operation. The first bus cycle is run, and the 
next bus cycle hits in the same page. The RAS signal is not negated before the next bus 
cycle is run. Note that in this case the row address does not appear on the pins for a bus 
cycle that hits in the page. The Column Address is immediately muxed onto the pins. In 
transitioning to the third bus cycle, a miss in the page is detected. The RAS line is 
precharged before the end of the bus cycle so that an extra delay is not incurred waiting 
for the line to precharge. 
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The example in Figure 11-9 shows a write cycle followed by a read cycle. If there is a hit © 
in the page for a write cycle, CAS must be delayed by one clock to allow data to become 
valid, as shown in Figure 11-10. 


CLOCK 






































DRAMR/W 














DATA 


ee io : | ss } SO nae oe ane 
<— BUS CYCLE 1 oo BUS CYCLE 2 an BUS CYCLE 3 a. 


Figure 11-9. Continuous Page-Mode Operation 





11-20 MCF5307 User’s Manual MOTOROLA 


SYNCHRONOUS/ASYNCHRONOUS DRAM CONTROLLER MODULE 


CLOCK 


ADDR 





DRAMR/W | 
' | ; | 


+—— BUS CYCLE 1 el BUS CYCLE 2 ae | 


Figure 11-10. Write Hit in Continuous-Page Mode 


11 
11.5.2.5 Extended Data Out (EDO) Operation. Extended Data Out is a variation of 
page mode that allows the DRAM to continue driving data out of the device while CAS is 

being precharged. In order to support EDO DRAM’s, the SADRAMC delays the internal 

termination of the cycle by one clock to capture data after CAS is being precharged. In 

order for data to be driven by the DRAM’s the RAS signal is held after CAS is negated. 

EDO operation does not affect write operations. EDO DRAM’s may be used in either the 

Full Page Mode or the Burst Page Mode. Single accesses that are @ not followed by a hit in 

the page look the same as non-page mode accesses. 


Figure 11-11 shows 4 consecutive EDO accesses. Note that the data is sampled after the 
CAS has been negated. Note also that on the last page access, CAS is held until after the 
data is sampled to assure that the data is driven. This allows RAS to be precharged before 
the end of the cycle. 
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| 

| 

RCD=0 : | 
| | 


DRAMR/W 


DATA > 



































Figure 11-11. EDO Read Operation 


11.5.2.6 Refresh Operation. Refresh support is provided in the SADRAMC by CAS 
before RAS refresh operation. Refresh is not synchronized to the bus activity. A special 
DRAMRW pin is provided so that refresh can take place regardless of the state of the 
processor bus. When the Refresh Counter rolls over, it sets an internal flag to tell the 
DRAM controller that a refresh is pending. If refresh becomes pending during a 
Continuous Page Mode Access, the page will be closed (RAS precharged) when the 
operand transfer is completed. This will allow the refresh to take place. That flag is cleared 
as soon as the refresh cycle is run. The only event that will delay refresh is an active bus 
access operating in one of the DRAM banks. Refresh will take place in both banks at the 
same time as determined by the Refresh Control Register (RCR). Any DRAM accesses 
will be delayed while refresh takes place. 





Figure 11-12 shows a bus cycle delayed by a refresh operation. Notice that the DRAMRW 
signal is forced high during refresh. The row address is held until the DRAM access takes 
place. 
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CLOCK 


ADDR 








DRAMR/W 











Figure 11-12. DRAM Access Delayed By Refresh 


11.5.2.7 External Master Support. External masters will be supported with the 
SADRAMC. The SADRAMC will provide strobes and termination for the external master, 
but external address row and column multiplexing must be provided in this case. 


11.6 SYNCHRONOUS OPERATION 


In the synchronous mode of operation, signals, registers, and timing differ greatly from the 
asynchronous mode. Once synchronous operation is selected by setting the SO bit in the 
DCR, the memory map will reflect the synchronous operation, and there is no way to 
return to asynchronous operation without resetting the processor. 





11.6.1 Synchronous Memory Map 


The SADRAMC memory map shown in Table 11-1 is the same for both synchronous and 
asynchronous operation. The specific bits in the registers change function, and they are 
described below. 


11.6.1.1 DRAM Control Register -DCR MBAR + $100. 


15 14 13 12 11 10 9 8 fi 6 5 4 3 2 1 0 
RESET: , 
0 


This register provides programmable options for the refresh logic as well as the control bit 
to determine if the module is operating with synchronous or asynchronous DRAMs. 
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11.6.1.1.1 Synchronous Operation - SO 


This bit determines if the SADRAMC is in synchronous operation mode. For synchronous 
DRAMs, this bit must be set to one. Note that once the part has entered into synchronous 
operation, it cannot be returned to asynchronous operation except by a reset. Table 11- 
21 summarizes the SO bit encoding. 


Table 11-21. SO Bit Encoding 


FUNCTION 


Asynchronous 


peration 


Synchronous Operation 





11.6.1.1.2 No Address Multiplexing - NAM 


Some implementations will require external multiplexing support. For instance, if there is 
an external master accessing the DRAM or if a linear addressing scheme is required the 
SADRAMC multiplexing may not be sufficient. In these cases, it would be advantageous 
to prevent the SADRAMC from multiplexing the addresses on a DRAM access. If this bit 
is set to a 1, the SADRAMC will not multiplex the external address bus to provide column 
addresses. Table 11-22 shows the NAM encoding. 


Table 11-22. NAM Bit Encoding 


FUNCTION 


Address Bus is 
Multiplexed for DRAM 
Accesses 





Address Bus is not 
Multiplexed for DRAM 
Accesses 





11.6.1.1.3 Command on Clock Enable - COC 


Implementations that utilize external multiplexing must have support for command 
information to be multiplexed onto the SDRAM address bus. This bit allows the command 
information to be driven out on what is normally the SDRAM clock enable (SCKE). In this 
case, the SADRAMC will not support self refresh operation, but external support may be 
generated. If the COC bit is set, the address command bit information will be generated 
on the SCKE pin. External multiplexing will be responsible for putting the command 
information on the proper address bit. Table 11-23 shows the COC encoding. 


Table 11-23. COC Bit Encoding 
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11.6.1.1.4 Initiate Self-Refresh Command - IS 


This bit tells the DRAM controller to send the SELF command to both banks to cause the 
SDRAMs to enter into low-power self-refresh state where they will remain until the |S bit 
is cleared. When the IS bit is cleared, the DRAM controller will send the SELFX command 
to the SDRAMs to tell them to exit the self-refresh state. The refresh counter is suspended 
while the SDRAMs are in self-refresh. Table 7-24 summarizes the IS bit encoding. 


Table 11-24. IS Bit Encoding 


PAG HG ACOH OPERE. | no ppeak or Exit 
Self Refresh 
Initiate Self Refresh or 
stay in Self Refresh 


11.6.1.1.5 Refresh Timing - RTIM 


These bits will determine the timing operation of Auto-Refresh in the SADRAMC. 
Specifically, it will determine the number of clocks inserted between the REF command 
and the next possible ACTV command. This same timing is used for both banks of the 
SADRAMC. This corresponds to tac in the SDRAM specifications. Table 11-25 shows the 
encoding of the RTIM bits. | 





Table 11-25. RTIM Encoding 





11.6.1.1.6 Refresh Count - RC 


This field controls the frequency of refresh performed by the SADRAMC. One is added to 
the value stored in these register locations and multiplied by 16 bus clocks to determine 
the refresh period. This operation is the same as in asynchronous mode. 
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11.6.1.2 Address & Control Registers - DACRO & DACR1 MBAR+$108, 110. 
31 30 29 | 28 27 ; 26 25 24 23 22 21 20 19 18 17 160 


15 14 13 12 11 ~ 10 9 8 7 6 5 4 3 2 1 0 
[re [asd] CaS And [cM «Pd [ws] PST «SCT ew | Po 
RESET: 


0 0 


These registers contain the base address compare value and the control bits for both 


banks 0 and 1 of the DRAM controller. Address and timing are also controlled by bits in 
the ACRx registers. 


11.6.1.2.1 Base Address Register - BA[31:18] 


These register bits are used in conjunction with the BAM bits in the DCMR to determine 
the address range in which the associated bank of DRAM will be located. Each bit is 
compared with the corresponding address of the bus cycle in progress. If each bit 
matches, or if bits that do not match are masked in the BAM, the address hits in the 


associated bank’s DRAM block. These bits function the same as in asynchronous 
operation. 


11.6.1.2.2 Refresh Enable - RE 


This bit determines if the SADRAMC will generate a refresh cycle to the associated DRAM 


bank. Table 11-26 shows the encoding of the RE bit. This bit is reset to zero to ensure that 
the refresh function is disabled at reset. 





Table 11-26. RE Encoding 












FUNCTION 


ee ce Do Not Refresh Associated DRAM Bank 
Refresh Associated DRAM Bank 


11.6.1.2.3 Column Address Strobe Latency - CASL[1:0] 


These bits determine how long the data is delayed after the CAS signal (or the read 
command) is asserted during a SDRAM access. This data delay corresponds to the taop 
specification in most SDRAMs. This also implies other timings with respect to the SDRAM. 
These include active command to precharge command (tars), precharge command to 
active command (t,,), last data input to precharge command (tay, ), and last data out to 
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early precharge (t-,). Check your SDRAM specs for greater detail. Table 11-27 
summarizes the CASL[1:0] encoding and function. 


Table 11-27. Synchronous CASL Encoding 


NUMBER OF BUS CLOCKS 


— en 
Se 





11.6.1.2.4 Initiate Mode Register Set Command - IMRS 


This bit will generate the Mode Register Set (MRS) command to the associated SDRAMs. 
To use this feature, the base address and mask registers must be set. The associated 
CBM bits should also be initialized. After the IMRS bit is set, the next access to the 
address space of the SDRAM will cause the MRS command to that SDRAM to be 
generated. The address of the access should be selected in order to place the correct 
mode information on the address pins of the SDRAM. This bit is set to initiate a MRS 
command. The DRAM controller will clear the bit when the command is finished. Table 
11-28 summarizes the function of the IMRS Bit. Any accesses via the IMRS bit should be 
restricted to be no wider than the port size programmed in the PS bits. 


Table 11-28. IMRS Bit Encoding 


ere ee no Action 











initiate MRS Command 


11.6.1.2.5 Command and Bank Mux - CBM[2:0] 


Because different SDRAM configurations will cause the bank and column bits to 
correspond to different addresses these resources have been made programmable. 
These bits will determine the addresses these onto which these functions will be 
multiplexed. Table 11-29 shows the encoding of these bits. This encoding along with the 
address multiplexing scheme handles common organizations of 16-Mbit SDRAMs, as 
well as some organizations of 4-Mbit, and allowing room for future 64-Mbit 
implementations. Note that the bank select bits include a base bit and all address bits 
above. This is to allow for future implementations of SDRAM that have more than one 
bank select bit. 
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Table 11-29. CBM Encoding 


[et | omen | wecenncran, 
a 
es 


















11.6.1.2.6 Port Size - PS 


These two bits will determine the port size of the associated bank of SDRAM which will 
allow for dynamic sizing of the associated accesses. Table 11-30 shows the encoding of 
the PS bits. This encoding is the same as used in asynchronous operation. 


| Table 11-30. PS Encoding 


a 
ee 


11.6.1.2.7 Initiate Precharge All Command - IP 


This bit will cause a Precharge All (PALL) command to be generated to the associated 
SDRAM bank. This is useful in the power up sequence of SDRAMs. In order to use this 
feature, the base address and mask registers must be set. The associated CBM bits 
should also be initialized. After the IP bit is set, the next access to the address space of 
the SDRAM will cause the PALL command to that SDRAM bank to be generated. It is 
automatically cleared by the DRAM controller after the PALL command is finished. Any 
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accesses via the IP bit should be restricted to be no wider than the port size programmed 
in the PS bits. Table 7-31 summarizes the function of the IP Bit. 


Table 11-31. IP Bit Encoding 


Initiate PALL Command 


11.6.1.2.8 Page Mode -- PM 


This bit determines how the associated SDRAM bank supports page mode operation. 
Table 11-32 shows the encoding of the PM bit. 










Table 11-32. Synchronous PM Encoding 


Lo Page Mode on Bursts Only 
ae Continuous Page Mode 


11.6.1.3 DRAM Controller Mask Registers - DMRO & DMR1 MBAR+$10C,114. 
These registers are equivalent in synchronous and asynchronous operation. See 
subsection 11.5.1.3 for details. 













11.6.2 Synchronous/Asynchronous DRAM Controller Synchronous 
Operation 


The Synchronous/Asynchronous DRAM controller was designed to provide a high level 
of functionality and flexibility while remaining cost effective. There are 2 basic modes of 
operation of the SADRAMC in synchronous mode: 


e Burst-Page Mode 
e Continuous-Page Mode 


11.6.2.1 Synchronous DRAM General Operation Guidelines. The SADRAMC 
provides control for the SDRAM signals SRAS, SCAS, DRAMRW, SDQM, and SCS, as 
well as multiplexing the addresses to support common SDRAM implementations. 


11.6.2.1.1 Address Multiplexing 


The basic address multiplexing is the same as for the asynchronous operation as shown 
in Table 11-17 with the addition of support for a command bit and bank addresses as 
described in Table 11-29. This multiplexing scheme provides for a high level of flexibility 
with respect to which types of SDRAM are supported. Tables 11-33 through 11-38 give 
examples of how the address can be connected to support various organizations of 
SDRAM. This is not an exhaustive set of possibilities, but gives examples of the principle 
concepts. The first four examples show 16-Mbit SDRAMs. The next is a 4-Mbit SDRAM 
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implementation. The last is a.}64-Mbit SDRAM implementation. Also note that the 


addressing scheme does not support all organizations of 4-Mbit SDRAM. 


Table 11-33. Address Setup for 2M X 2 Bank X 4-Bit SDRAM X 2 as 8-Bit Port 







ACTV COMMAND 
FUNTION 


SDRAM ADDRESS PIN ADDRESS PIN 





READ/WRITE 
(ached eg eda FUNCTION 


ck 


Bank Select Bank Select 









Table 11-34. poe Setup for 2M X 2Bank X 4-Bit SDRAM X 4 as 16-Bit Port 





ee 
pM 
a 
es ee ee 
es ee ee ee 
ee ee ee 
ee ee ee ee 
a ee ee eee ee eee 
ee a ee ee ee 
ee ee eee ee ee 
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A3 


ACTV COMMAND READ/WRITE 
SDRAM ADDRESS PIN ADDRESS PIN |__ FUNCTION | COMMAND FUNCTION 
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Table 11-34. Address Setup for 2M X 2Bank X 4-Bit SDRAM X 4 as 16-Bit Port 


ACTV COMMAND READ/WRITE 
SDRAM ADDRESS PIN ADDRESS PIN FUNCTION COMMAND FUNCTION 






Table 11-35. Address Setup for 2M X 2 Bank X 4-Bit SDRAM X 8 as 32-Bit Port 


ACTV COMMAND READ/WRITE 
SDRAM ADDRESS PIN ADDRESS PIN | FUNCTION | COMMAND FUNCTION FUNCTION 


Bank Select Bank Select 
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Table 11-36. Address Setup for 512 K X 2 Bank X 16-Bit SDRAM X 1 as 16-Bit Port 
es ee Sas ee 
pa 






Bank Select Bank Select 


Table 11-37. Address Setup for 128 K X 2 Bank X 16-Bits SDRAM X11 as 16-Bit Port 


ACTV COMMAND READ/WRITE 
SDRAM ADDRESS PIN ADDRESS PIN FUNCTION COMMAND FUNCTION 





ee 
a a ee 
a a 

















ab 
Nh 





> 
to 


> 
BR 


lath 
“NJ 
; 
© 
© 
Oo 





> 
on 


> 
oO 







> 
cn | 


Command 


Bank Select 





Bank Select 


Table 11-38. Address Setup for 1M X 4 Bank X 16-Bits SDRAM X 2 as 32-Bit Port 
READ/WRITE 


ACTV COMMAND 
SDRAM ADDRESS PIN ADDRESS PIN ~ FUNCTION COMMAND FUNCTION 


[es 
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Table 11-38. Address Setup for 1M X 4 Bank X 16-Bits SDRAM X 2 as 32-Bit Port 


ACTV COMMAND READ/WRITE 
SDRAM ADDRESS PIN ADDRESS PIN | FUNCTION | COMMAND FUNCTION FUNCTION 













Bank Select Bank Select 
Bank Select Bank Select 
11.6.2.1.2 Power-On Sequence 


Synchronous DRAMs have a prescribed power-on sequence. The SADRAMC supports 
this sequence with the following procedure: 





e The SDRAM control signals are reset to the Idle state. Wait the prescribed period 
after reset before any action is taken on the SDRAMs. 


Set up the DCR, ACR, and DCMR registers in their operational configuration. Do not 
yet enable refresh commands. 


Issue the PALL command to the SDRAMs by setting the associated bit in the DCR, 
and accessing a memory space within the SDRAM. 


Enable refresh, and wait a period long enough for at least 8 refreshes to take place. 


Issue the MRS command by setting the IMRS bit in the ACRs, and accessing a 
memory space within the SDRAM. 


e NOTE: Accesses for the PALL and MRS commands must be to an address which is 
appropriate. SDRAM registers (registers on the SDRAM, not in the MCF5307 
SADRAMC) are accessed via the address bus. Use an address correct for the 
SDRAM configuration and muxing scheme. 





11.6.2.1.3 Mode Register Settings 


It is possible to configure the operation of SDRAMs, namely their burst operation and CAS 
latency. The CAS latency is a function of the speed of the SDRAM and the bus clock of 
the SADRAMC. The SADRAMC will operate at a CAS latency of 1, 2, or 3. 


Although the SADRAMC supports bursting operations, it does not use the bursting 


features of the SDRAMs. Since operand sizes can be 1, 2, 4, or 16 bytes long, support of 
a fixed burst length in the SDRAMs mode register becomes problematic. Therefore, the 
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SADRAMC will generate a new address and read or write command for each transfer 
within the burst. Therefore, the SDRAM mode register should be either set to a burst 
length of one, or not to burst. 


The mode register in the SDRAM is written by setting the IMRS bit in the associated 
bank’s ACR register. First the base address and mask registers must be set. The 
associated CBM bits should also be initialized. After the IMRS bit in the ACR is set, the 
next access to the address space of the SDRAM will cause the MRS command to that 
SDRAM to be generated. The address of the access should be selected in order to place 
the correct mode information on the address pins of the SDRAM. The addresses will not 
be multiplexed for the MRS command. The MRS access should be a write access. Figure 
11-13 shows the Mode Register Set command. The MRS takes place during the first clock 
of the bus cycle. | | 


CLOCK 








DRAMR/W \ rs ; 

















Figure 11-13. Mode Register Set Command 


11.6.2.1.4 General Details 

All signals generated in synchronous mode by the SADRAMC transition at the rising edge 
of the bus clock. External masters are handled by the SADRAMC the same as internal 
accesses. All SDRAM accesses should be terminated by the SADRAMC. There is no 
priority encoding between banks. If the user programs the banks to overlap, or to overlap 
with other internal resources, undefined behavior may result. 
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11.6.2.2 Burst-Page Mode. The advantage of SDRAM is the ability to quickly and 
efficiently provide data once the page of SDRAM has been opened. Once CAS has been 
issued the SDRAM will accept a new address and CAS every clock for as long as the 
accesses are in that page. In burst page mode, there will be multiple read or write 
operations for every ACTV command in the SDRAM if the requested transfer size is 
greater that the port size of the associated SDRAM. The primary cycle of the transfer will 
generate the ACTV and READ or WRITE commands and the secondary cycles will 
generate only READ or WRITE commands. As soon as the transfer is completed, the 
PALL command is generated to begin preparation for the next access. 


In order to provide the ability to quickly transfer various sizes of data, the SADRAMC does 
not utilize the burst capability in the SDRAM architecture. Instead of using the SDRAM 
burst, addresses are incremented internally to the SADRAMC to allow fast accesses. 


Figure 11-14 shows a burst read operation. Notice that the PALL command takes place 
before all of the data is read. Figure 11-15 shows the burst write operation. Notice that in 
the case of a write, the bus cycle is terminated sooner than with the read case. The next 
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bus cycle is initiated sooner, but is not allowed to begin an SDRAM cycle until the 
precharge to ACTV delay is completed. 


CLOCK | | | | | | | | | | | | | | | | | | | | | | 


ADDR 





| 
| 
| 
o_ | 
» sh 
Jo sol 
| | 
oem 1 1 | i i 
DRAMAW if a CAS LATENCY sp | | i, ! 
\ I ! ' ' | ' ' \ 1 ' 

| | | | ae ei ee : 


COMMAND 
ADDRESS 








cs 





DQM 





| ACTV | NOP | READ | PALL 


Figure 11-14. Burst Read SDRAM Access 
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CLOCK 


ADDR 

















DRAMR/W 








DATA 





COMMAND 
ADDRESS 





DQM 


| ACTV | NOP | WRITE | PALL | 


Figure 11-15. Burst Write SDRAM Access 


Accesses in synchronous burst page mode will always cause the following sequence: 


1. ACTV command 


2. NOP commands to assure RAS to CAS delay (if CAS latency is 1, there are no NOP 
commands). 


3. Required number of Read Commands or Write Commands to service the transfer 
size with the given port size. 


4. Some transfers may require more NOP commands to assure the ACTV to 
Precharge delay. 


5. PALL command 
6. Required number of idle clocks inserted to assure Precharge to ACTV delay. 
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11.6.2.3 Continuous-Page Mode. The SADRAMC incorporates a variation in page 
mode that tries to balance performance complexity and size. This is called continuous- 
page mode. 


Continuous-page mode operates with the internal pipelined bus of the MCF5307 CPU 

Core to predict whether the upcoming bus cycle will hit in the same page of SDRAM as it 

finishes the current bus cycle. If the next bus cycle is not pending or misses in the page, 
| the PALL command is generated to the SDRAM. Issuing the PALL command in this 
manner allows the precharge to be hidden in the current cycle. If the next bus cycle is. 
pending and hits in the page, the page is left open, and the next SDRAM access will begin 
with a read or write command. Figure 11-16 shows an example of a read access followed 
by a read in continuous-page mode. Note that there is no precharge between the two 
accesses. Also notice that the second cycle begins with a read operation with no ACTV 
command. 


CLOCK | | | | | | | | | | | | | | | | | | | | | 











PB Be 
a Se ee ee eee oe 
J, Ge ae es | 
| 








| 





O 
> 
7) 








DRAMR/W 


DATA 


COMMAND 
ADDRESS 





















DQM 














-ACTV NOP READ | NOP PALL 


| READ 


Figure 11-16. Synchronous Continuous Page Mode Access -- Read Followed by 
| | Read Mane 
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Figure 11-17 shows an example of a write accesses followed by a read in continuous 
page mode. Note that the second cycle begins sooner after the write than after the read. 
This is because the bus cycle is terminated with the write command. A read requires data 
to be returned before the bus cycle may be terminated. 


CLOCK | | | | | | | | | | | | | | | | | | | | | 









































Piel, 2 Woe ee on We ae, 
ORS Po eee ee ee ee I a ee a 


O 





DRAMR/W Sa) ee a? oO 2 0 a A, 








DATA 





COMMAND 
ADDRESS 





DQM 





NOP READ 


Figure 11-17. Synchronous Continuous Page Mode Access -- Write Followed by 
Read 


Note that in continuous page mode operation, secondary accesses will not generate the 
physical address externally, but will present the multiplexed address. 


11.6.2.4 Auto-Refresh Operation. The SADRAMC is equipped with a refresh counter 
and control. This logic is responsible for providing timing and control to refresh the 
SDRAM. Once the refresh counter is set, and refresh is enabled, the counter counts to 
zero. At this time, an internal refresh request flag is set and the counter begins counting 
down again. The SADRAMC completes any active burst operation and then performs a 
precharge all operation. The SADRAMC then initiates a refresh cycle and clears the 
refresh request flag. This refresh cycle includes a delay from any precharge to the auto- 
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refresh command, the auto-refresh command, and then a delay until any ACTV command 
is allowed. Any SDRAM access that is initiated during the auto-refresh cycle will be 
delayed until the cycle is through. | | 


Figure 11-18 shows the auto-refresh timing. In this case, there is an SDRAM access when 
the refresh request becomes active. The request is delayed by the precharge to ACTV 
delay programmed into the active SDRAM bank by the CAS bits. The REF command is 
then generated and the delay required by the RTIM bits in the DCR is inserted before the 
next ACTV command is generated. In this example, the next bus cycle is initiated, but 
does not generate an SDRAM access until Tpc is finished. 


CLOCK 
ADDR 
TS 
RAS 
CAS 


DRAMR/W 





COMMAND 
ADDRESS 


CS 





REF | DESL 


ACTV 


Figure 11-18. Auto-Refresh Operation 


When a REF command is generated by the SADRAMC, it goes to both banks of external 
SDRAM at the same time. This is accomplished ae both chip selects being active auing 
the REF command. 


11.6.2.5 Self-Refresh Operation. Self-refresh is a method of allowing the SDRAM to 
enter into a low-power state, while at the same time to perform an internal refresh 
operation and to maintain the integrity of the data stored in the SDRAM. The SADRAMC 
supports self-refresh with the IS bit in the DCR. When the IS bit is set, the SELF command 
is sent to the SDRAM. When the bit is cleared the SELFX command is sent to the 
SADRAMC. Figure 11-19 shows the self refresh operation. 


11-40 MCF5307 User’s Manual MOTOROLA 


SYNCHRONOUS/ASYNCHRONOUS DRAM CONTROLLER MODULE 


CLOCK 


RAS 


CAS 





COMMAND sj 
ADDRESS 


cs | 


CKE : 
| + ew 4 ee oo 
SEL | 
| pact | pest ! SELF REFRESH sSELFx' DESL POSSIBLE 
| ACTIVE | | , ACTV , 


Figure 11-19. Self Refresh Operation 
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SECTION 12 
TIMER MODULE 


12.1 OVERVIEW 


The timer module includes two independent general-purpose 16-bit timers. Timer 
references either timer 1 or timer 2 because both are functionally equivalent. The output of 
an 8-bit prescaler clocks each 16-bit timer. 


The timers can operate from the system clock or an external clocking source on the TIN pin. 
If the system clock is selected, it can be divided by 16 or 1 in the Timer Mode Register 
(TMR). System bus clock is defined as (CLKIN x 2)/(2,3, or 4). The PLL divides the 90 MHz 
internal clock by 2, 3, or 4 which yields a 45, 30, or 25MHz clocking source to the timers. 
See Section 4 PLL for details on defining bus clock speeds. Figure 12-1 is a block diagram 
of the timer module. 


12.1.1 Key Features 


The general-purpose 16-bit timer unit has the following features: 


e Maximum period of 5.96 seconds at 45MHz, 8.95 seconds at 30MHz, and 11.93 
seconds at 22.5MHz 


e 22.2ns resolution at 45MHz, 33.3ns at 30MHz, 44.4ns at 22.5MHz 
Programmable sources for the clock input, including external clock 





Input-capture capability with programmable trigger edge on input pin 


Output-compare with programmable mode for the output pin 
e Free run and restart modes 
e Maskable interrupts on input capture or reference-compare 
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GENERAL-PURPOSE TIMER 





7 0 
aaa eee SYSTEM BUS CLOCK OR 
: TIMER | SYSTEM BUS CLOCK/16 
CLOCK 
15 ___0 7 GENERATOR 
MODE REGISTER TIN 
PRESCALER MODE BITS 
DIVIDER —CLOCK 
15 0 
| A DETECTION 
15 - Oo 
REFERENCE REGISTER |. | TOUT 


15 


© 


CAPTURE REGISTER ee ae 


DATA BUS (16 


Figure 12-1. Timer Block Diagram 
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12.2 MODULE OPERATION 


12.2.1 General-Purpose Timer Units 


The general-purpose timer units provide the following features: 


e Each timer can be programmed to count and compare to a reference value stored ina 
register or capture the timer value at an edge detected on the TIN pin 


e System bus clock can be divided by 16 or 1. This clock is input to the prescaler 
e The TIN pin is fed directly into the 8 bit prescaler 


The 8 bit prescalar clock divides the clocking source and is user-programmable from 1 
to 256 


Programmed events generate interrupts 
The TOUT pin can be configured to toggle or pulse on an event 


If the TIN pin is used as a clocking source, it can not be used as an input capture. If the 
internal clock is used, the TIN pin can be used as an input capture. 


12.2.1.1 PRESCALER. The prescalar clock input may be selected from the system bus 
clock (divided by 1 or by 16), or from the corresponding timer input TIN pin. TIN is 
synchronized to the system bus clock. The synchronization delay is between two and three 
main clocks. The ICLK bits of the corresponding TMR select the clock input source. The 
prescaler is programmed to divide the clock input by values from 1 to 256. The prescalar 
output is used as an input to the 16-bit counter. 


12.2.1.2 CAPTURE MODE. The timer has a 16-bit Timer Capture Register (TCR) that 
latches the counter value when the corresponding input capture edge detector senses a 
defined transition (of TIN). The Capture Edge (CE) bits in the TMR select the type of 
transition triggering the capture. A capture event sets the Timer Event Register (TER) bit 0 
and issues a maskable interrupt. _ 


12.2.1.3 REFERENCE COMPARE. The timer may be configured to count until it reaches a 
reference value. It then either starts a new time count immediately or continues to run. The 
Free Run/Restart (FRR) bit of the TMR selects either mode. A timer that reaches the 
reference value sets the TER bit 1 and issues an interrupt if the Output Reference Interrupt 
(ORI) enable bit in the TMR is set. 


12.2.1.4 OUTPUT MODE. The timer may send an output signal on the Timer Output 
(TOUT) pin when it reaches the reference value as selected by the Output Mode (OM) bit in 
the TMR. This signal can be an active-low pulse or a toggle of the current output under 
program control. 


12.3 PROGRAMMING MODEL 


12.3.1 General-Purpose Timer Registers 


You can modify the timer registers at any time. Table 12-1 illustrates the programming 
model. 
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Table 12-1. Programming Model for Timers 


TIMER 1 TIMER 2 ) 
ADDRESS ADDRESS SIM MODULE-TIMER MODULE REGISTERS 


12.3.1.1 TIMER MODE REGISTER (TMR). TMR is a 16-bit memory-mapped register. This 
register programs the various timer modes and is cleared by reset. 




















Timer Mode Register (TMR) Address MBAR+$140, MBAR+$180 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
[____PRESCALER VALUE (PS7-PSQ)——=«|—cet-ce0 | OM | OR | FAR] GKi-GiO | AST 
RESET 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 
~ Read/Write a. | Supervisor or User Mode 


PS7—PSO — Prescaler Value 


The prescaler is programmed to divide the clock input by values (system bus clock/(16 or 1) 
or clock on TIN pin) from 1 to 256. The binary value 00000000 divides the clock by 1; the 
value 11111111 divides the clock by 256. 


CE1—CE0 — Capture Edge and Enable Interrupt 
11 = Capture on any edge and enable interrupt on capture event 
10 = Capture on falling edge only and enable interrupt on capture event 
01 = Capture on rising edge only and enable interrupt on capture event 
00 = Disable interrupt on capture event 


OM — Output Mode 
1 = Toggle output 


0 = Active-low pulse for one system bus clock cycle (22ns at 45MHz, 33ns at 30MHz, © 
and 44ns at 22.5MHz) 


ORI! — Output Reference Interrupt Enable 


1 = Enable interrupt upon reaching the reference value 
OQ = Disable interrupt for reference reached (does not affect interrupt on capture 
function) 
NOTE 


lf ORI is set when the REF event is asserted in the Timer Event 
Register (TER), then an immediate interrupt will occur. 
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FRR — Free Run/Restart 


1 = Restart: Timer count is reset immediately after reaching the reference value 
0 = Free run: Timer count continues to increment after reaching the reference value 


CLK1—CLKO — Input Clock Source for the Timer 
11 = TIN pin (falling edge) 
10 = System bus clock divided by 16. Note that this clock source is not synchronized 
to the timer; thus successive time-outs may vary slightly in length 
01 = System bus clock divided by 1 
00 = Stop count 


RST — Reset Timer 


This bit performs a software timer reset similar to that of an external reset, although while 
this bit is zero, the other register values can still be written, if necessary. Effectively, a 
transition of this bit from one to zero is what resets the register values. The counter/timer/ 
prescaler will not be clocked unless the timer is enabled. 


1 = Enable timer 
0 = Reset timer (software reset) 


12.3.1.2 TIMER REFERENCE REGISTER (TRR). The TRR is a 16-bit register containing 
the reference value that is compared with the free-running Timer Counter (TCN) as part of 
the output-compare function. TRR is a memory-mapped read/write register. 


TRR is set to $FFFF at reset. The reference value is not matched until TCN equals TRR. 


Timer Reference Register (TRR) Address MBAR+$144,MBAR+$184 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
16-BIT REFERENCE COMPARE VALUE REF 15 - REFO 
RESET 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
Read/Write Supervisor or User Mode 








12.3.1.3 TIMER CAPTURE REGISTER (TCR). The TCRis a 16-bit register that latches the 
value of the Timer Counter (TCN) during a capture operation when an edge occurs on the 
TIN pin, aS programmed in the TMR. TCR appears as a memory-mapped read-only register 
to users and is cleared to $0000 at reset. This assumes that the system bus clock has been 
selected as the clocking source. The TIN pin cannot function as a clocking source and as 
an input capture pin simultaneously. 


Timer Capture Register (TCR) 3 Address MBAR+$148,MBAR+$188 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


16-BIT CAPTURE COUNTER VALUE CAP15 - CAPO 


RESET 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 
Read Only Supervisor or User Mode 
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12.3.1.4 TIMER COUNTER (TCN). TCN is a memory-mapped 16-bit up-counter. Users can 


read it at any time. A read cycle to TCN von the current timer value and does not affect 
the counting operation. . | 


A write cycle to TCN causes it and the corresponding prescaler to be reset. 


Timer Counter Register (TCN) 7 a Address MBAR+$14C, MBAR+$18C 
15 14 13 12 11 10 23=—s(«g 8 7 6 5 4 3 2 1 ) 


| 16-BIT TIMER COUNTER VALUE COUNT15 - COUNTO 


RESET 0 0 0 0 0 @) 0 0 0 0 0 860 0 0 0 0) 
Read/Write Supervisor or User Mode 


12.3.1.5 TIMER EVENT REGISTER (TER). The TER is an 8-bit register that reports events 
the timer recognizes. When the timer recognizes an event, it will set the appropriate bit in 
the TER, regardless of the corresponding meet -enable bits (ORI and CE) in the TMR. 


TER, which appears to users as a memory-mapped register, may be read at any time. 
Writing a 1 to any bit clears it (writing a zero does not affect bit value); more than one bit may 


be cleared at a time. The REF and CAP bits must be cleared before the timer will negate the 
IRQ to the iter controller. Reset peas this register. 


| , Address 
Timer Event Register (TER) sees ,sMBAR+$191 


7 6 5 4 3 2 1 0 
RESET 0 0 0 0 0 0 0 0 
Read/Write Supervisor or User Mode 


Bits 7-2 — Reserved for future use. 


CAP — Capture Event 


The counter value has been latched into the TCR. The CE bit in the TMR enables the 
interrupt request caused by this event. Write a one to this bit to clear the event condition. 


REF — Output Reference Event — 


The counter has reached the TRR value. The ORI bit in the TMR enables the interrupt 
request caused by this event. Write a one to this bit to clear the event condition. 


12.3.1.6 TABLE OF TIMEOUT VALUES. Table 12-2 provides a table of time-out values for 
the timers. The values provided are the time it takes the 16-bit TCN register to count from 

$0000 to $FFFF. It assumes the clocking source is from the system bus clock and the Timer 
Reference Register is set to $FFFF. TMR bits [2:1] define the clocking source to the timers. 

A binary value of 00 in TMR bits [2:1] divides the system bus clock by 1 and a value of 10 

divides the system bus clock by 16. 


TMR bits [2:1] define the clocking source to the timers. TMR bits [15:8] define the prescale 
value. Additionally, the system bus clock to the timers depends on the clock setting in the 
PLL. The PLL divides the 90 MHz internal clock by 2, 3, or 4 which yields a 45, 30, or 25MHz 
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clocking source to the timers (assuming a master clock of 45MHz on the CLKIN pin). See 
the PLL section for more details. 


A time-out occurs when the value of the Timer Reference Register (TRR) is equal to the 
Timer Counter Register (TCN). Below is an example of how to define time-out period: 


Time-out Period = (1/clock) x (1 or 16) x (TMR1 prescale value+1) x(Timer ref. value) 


For example, if the timer clock was 45 MHz, the clock was divided by 16 (TMR [2:1]=10), the 
TMR prescale was set to $7F, and the timer reference was $ABCD (43981 decimal), the 
time-out period would be: 


Time-out Period =(1/45E6) x (16) * (127+1) x(43981) = 2.00 seconds 


The TMR prescale value is always between and 1 and 256. When calculating time-out 
periods, add 1 to the prescale. This makes calculating easier since a prescale value of $00 
= 1 and $FF=256. The table below assumes that the system clock is being used as the 
clocking source. If an external clock is used, the timeout values will need to be calculated 


The table below shows the time-out values for various settings of the TMR. The time-out 
values shown (in seconds) are representative of the time it takes the counter to count from 
$0000 to $FFFF. 


Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 


| TMRBITS [15:8] | 45MHz | 30MHz | 22.5MHz | 45MHz | 30MHz | 22.5 MHz 















DECIMAL TMR REGISTER BITS [2:1]=10 TMR REGISTER BITS [2:1]=01 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 
fe Note: values below are in seconds 








ea 


0.13981 0.20972 0.27962 0.00874 | 0.01311 0.01748 
0.16311 0.24467 0.32622 0.01019 | 0.01529 0.02039 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 







TMR BITS [15:8] 


12 


13 
14 
15 





—_ 
© 


a 
c 


N 


N 
io) 


NO 
o) 


NO 


4 


Nh] MP 
oO} o1 


N 


7 
8 
9 
0 
1 


NO 


©; M 


o>) 
NO 


i) 
1d) 


o>) 
ol 


i¢) 
B 


ie) 
N 


io) ie) 
©o o) 


io) 
co 


_ N | — 


a 


aS 
(o>) 


pis 
G}| NM 


44 


pit 


47 


aS 
0O 


O17; OF} OF; O1}] O1/ C1] C1] G1] & 
N 1 OD] O1/ BB] @!]M)] —] GO] © oO} O1 
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37° | 1.30489 | 1.95734 0.12233 | 0.16311 
s 


TMR REGISTER BITS [2:1]=10 TMR REGISTER BITS [2:1]=01 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 
0.44273 | 0.6641 0.88546 | 0.02767 | 0.04151 | 0.05534 
0.46603 | 0.69905 | 0.93207 | 0.02913 | 0.04369 | 0.05825 














2.02725 | 2.703 0.08447 0.1267 0.16894 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 


TMR BITS [15:8] 


TMR REGISTER BITS [2:1]=10 | TMR REGISTER BITS [2:1]=01 
Pee (SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 








3A 
3B 
3C 
3D 
SE 
SF 
40 
41 
42 
43 


O) | & or; Oo 
No} oO; © 


oO? 
o1 


Oo) | Oo 
N & | © 





7 
71 47 
72 48 


Ni 
(oe) 


49 
4A 
4B 
AC 
4D 
4E 
4F 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
5A 
5B 
5C 
5D 
SE 
SF 


N 
& 


N 
o 


N 
o1 


NIN 
CO}; N 


© © CO} CO} © N 
N ol OO; mM) — co 


Oo 
iS 


Oo 
Oo 


co 


c co 
N ie) —_ 


© 
NO 


oO] © 
oy; & 
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1.3748 2.7496 
1.3981 2.7962 
1.4214 2.84281 
1.4447 2.88941 

| 0.09175 








2.23696 


1.51461 2.27191 3.02922 0.09466 
1.53791 2.30687 3.07582 0.09612 
1.56121 2.34182 3.12243 0.09758 





1.49131 2.98262 | 0.09321 


1.46801 2.20201 2.93601 0.09175 


1.58451 3.16903 | 0.09903 
1.60782 | 2.41172 | 3.21563 | 0.10049 
1.63112 | 2.44668 | 3.26224 | 0.10194 
1.65442 | 2.48163 | 3.30884 | 0.1034 

1.67772 | 2.51658 | 3.35544 | 0.10486 
1.70102 | 2.55153 | 3.40205 | 0.10631 
1.72432 | 2.58649 | 3.44865 | 0.10777 
1.74763 | 2.62144 | 3.49525 | 0.10923 
1.77093 | 2.65639 | 3.54186 | 0.11068 
1.79423 | 2.69135 | 3.58846 | 0.11214 
1.81753 | 2.7263 3.63506 | 0.1136 

1.84083 | 2.76125 | 3.68167 | 0.11505 
1.86414 | 2.7962 3.72827. | 0.11651 
1.88744 | 2.83116 | 3.77487 | 0.11796 
1.91074 | 2.86611 | 3.82148 | 0.11942 
1.93404 | 2.90106 | 3.86808 | 0.12088 
1.95734 | 2.93601 | 3.91468 | 0.12233 
1.98064 | 2.97097 | 3.96129 | 0.12379 
2.00395 | 3.00592 | 4.00789 | 0.12525 
2.02725 | 3.04087 | 4.05449 | 0.1267 

2.05055 | 3.07582 4.1011 0.12816 
2.07385 | 3.11078 4.1477. | 0.12962 
2.09715 | 3.14573 4.1943 | 0.13107 


2.12045 3.18068 4.24091 0.13253 


3.18068 | 
2.14376 4.28751 


2.16706 3.25059 4.33411 0.13544 
2.19036 3.28554 4.38072 0.1369 

2.21366 | 3.32049 4.42732 0.13835 
2.23696 | 3.35544 4.47392 0.13981 
2.26026 3.3904 4.52053 | 0.14127 
2.28357 3.42535 4.56713 0.14272 
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0.20972 





0.17185 
0.17476 
0.17768 
0.18059 
0.1835 
0.18641 
0.18933 
0.19224 
0.19515 
0.19806 
0.20098 
0.20389 
0.2068 
0.20972 
0.21263 
0.21554 
0.21845 
0.22137 
0.22428 
0.22719 
0.2301 
0.23302 
0.23593 
0.23884 
0.24176 
0.24467 
0.24758 
0.25049 
0.25341 
0.25632 
0.25923 
0.26214 
0.26506 
0.26797 
0.27088 
0.27379 
0.27671 
0.27962 
0.28253 
0.28545 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 


2.30687 3.4603 4.61373 0.14418 | 0.21627 0.28836 




















3 


2.33017 | 3.49525 4.66034 0.14564 | 0.21845 0.29127 
2.35347 | 3.53021 4.70694 0.14709 | 0.22064 0.29418 


0.2971 
0.30001 
0.30292 
0.30583 
0.30875 
0.31166 
0.31457 
0.31749 

0.3204 
0.32331 
0.32622 
0.32914 
0.33205 


6 
6 


6 
6 


—_, 
© 
— 


3 2.37677 | 3.56516 4.75354 0.14855 | 0.22282 


—_"s 
© 
NO 


5 
7 





6 9.42338 | 3.63506 | 4.84675 | 0.15146 | 0.22719 
| 104 2.44668 | 3.67002 | 4.89335 | 0.15292 | 0.22938 


2.46998 | 3.70497 4.93996 0.15437 | 0.23156 


2.51658 5.03316 | 0.15729 | 0.23593 
2.53988 | 3.80983 | 5.07977 | 0.15874 | 0.23811 


— 
Oo 
& 


2.49328 | 3.73992 4.98656 0.15583 | 0.23375 


2 
4 
6A 
C 


—_ 


pe ee ee ee Ce Ce ee — | — at | ok 
eC ee ee er ee Ge ee Ce =!O oO!1lo 
OO}; CO; N] ©} O11; BR] GO] DM oO; oO Nj} © 


0 


Oo 


6 


2.40007 | 3.60011 | 4.80015 0.22501 
256319 | 3.84478 | 5.12637 | 0.1602 | 0.2403 


111 


7 
7 


6E 2.58649 | 3.87973 5.17297 0.16166 | 0.24248 
6F 2.60979 | 3.91468 5.21958 0.16311 | 0.24467 
1 






| 0.25777 | 0.3437 
120 78 0.26433 | 0.35244 





0.35535 
0.35826 
0.36118 
0.36409 
0.367 
0.36991 
0.37283 
0.37574 
0.37865 
0.38157 
0.38448 
0.38739 
0.3903 
0.39322 
0.39613 
0.39904 
0.40195 


[er 
[a8 
[23 


127 
128 
129 
130 


131 






83 
84 
85 
87 
88 


: 
Ow 
rs 


: 
Ww 
~J 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 


TR BITS [16:38] _| aSiiz | 30M [ae | 30 we 


TMR REGISTER BITS [2:1]=10 TMR REGISTER BITS [2:1]=01 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 


3.23893 4.8584 6.47787 0.20243 | 0.30365 0.40487 
3.26224 4.89335 6.52447 0.20389 | 0.30583 0.40778 
3.28554 4.92831 6.57108 0.20535 | 0.30802 0.41069 
3.30884 4.96326 6.61768 0.2068 0.3102 0.4136 

3.33214 4.99821 6.66428 0.20826 | 0.31239 0.41652 











DECIMAL 














138 8A 
8B 


8C 


a 
Ww 
<e) 





— 
& 
oO 


4 8E 


8F 






3.35544 5.03316 6.71089 0.20972 | 0.31457 0.41943 
3.37874 5.06812 6.75749 0.21117 | 0.31676 0.42234 
3.40205 5.10307 6.80409 0.21263 | 0.31894 0.42526 
3.42535 5.13802 6.8507 0.21408 | 0.32113 0.42817 
3.44865 5.17297 6.8973 0.21554 | 0.32331 0.43108 
3.47195 5.20793 6.9439 0.217 0.3255 0.43399 
3.49525 5.24288 6.99051 0.21845 | 0.32768 0.43691 
3.51856 5.27783 7.03711 0.21991 | 0.32986 0.43982 
3.54186 5.31279 7.08371 0.22137 | 0.33205 0.44273 
3.56516 5.34774 7.13032 0.22282 | 0.33423 0.44564 
3.58846 5.38269 7.17692 0.22428 | 0.33642 0.44856 
3.61176 5.41764 7.22352 0.22574 0.3386 0.45147 
3.63506 5.4526 7.27013 0.22719 | 0.34079 0.45438 
3.65837 5.48755 7.31673 0.22865 | 0.34297 0.4573 

3.68167 5.5225 7.36333 0.2301 0.34516 0.46021 
3.70497 | 5.55745 7.40994 0.23156 | 0.34734 0.46312 
3.72827 5.59241 7.45654 0.23302 | 0.34953 0.46603 
3.75157 5.62736 7.50314 0.23447 | 0.35171 0.46895 
3.77487 5.66231 7.54975 0.23593 | 0.35389 0.47186 
3./9818 5.69726 7.59635 0.23739 | 0.35608 0.47477 
3.82148 5.73222 7.64295 0.23884 | 0.35826 0.47768 
3.84478 5./6717 7.68956 0.2403 0.36045 0.4806 

3.86808 5.80212 7.73616 0.24176 | 0.36263 0.48351 
3.89138 5.83707 7.78276 0.24321 | 0.36482 0.48642 
3.91468 5.87203 7.82937 0.24467 0.367 0.48934 
3.93799 5.90698 1.87597 0.24612 | 0.36919 0.49225 
3.96129 5.94193 7.92257 0.24758 | 0.37137 0.49516 


— 


=/—o3f ao 
> _~ 
wo; rm] — 


2S 


4 
145 91 
146 92 
147 93 
148 94 
149 95 
150 
151 
152 
153 
154 
15 
156 
157 
158 
1 






97 


9A 


on 


9C 


9E 
OF 
AO 
161 Al 
162 A2 
163 A3 
164 A4 
165 AS 
1 A6 
167 A7 
168 A8 
169 A9 
170 AA 
171 AB 
AC 
AD 
AE 
AF 





— 
Oo} O1 
oO; © 


Oo 


3.98459 5.97688 7.96918 0.24904 | 0.37356 0.49807 
4.00789 6.01184 8.01578 0.25049 | 0.37574 
4.03119 6.04679 8.06238 0.25195 | 0.37792 
4.05449 6.08174 8.10899 0.25341 | 0.38011 
4.0778 6.11669 8.15559 0.25486 | 0.38229 
4.1011 6.15165 8.20219 0.25632 | 0.38448 
4.1244 6.1866 8.2488 0.25777 | 0.38666 
4.1477 6.22155 8.2954 0.25923 | 0.38885 


0.50099 
0.5039 

0.50681 
0.50972 
0.51264 
0.51555 
0.51846 


173 
174 
175 
176 
177 


B1 





a] 
NO 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) | 
178 B2 4.171 0.39103 | 0.52138 
179 B3 4.1943 0.39322 | 0.52429 


B4 0.5272 






















re 
©O 
Oo 











202 CA 
203 © CB 
CC 


0.59128 
0.59419 
0.59711 
0.60002 
0.60293 
0.60584 
0.60876 
0.61167 


4.73024 0.44346 
4.75354 0.44564 
4.77685 0.44783 
4.80015 0.45001 
4.82345 0.4522 


204 
205 CD 
206 CE 
207 CF 
208 

209 D1 


4.84675 | 7.27013 9.6935 0.30292 | 0.45438 
4.87005 | 7.30508 9.74011 0.30438 | 0.45657 
4.89335 7.34003 9.78671 0.30583 | 0.45875 


a roso10s | 052136 
pes | 4108s see6i | o2e2ia | 0.0002 | 050400 
ea | aire | eaasar | aasser | oes | oes | _08e7e 

[tates | a2a0t | es6ts6 | aasiet | ozes0s | ose7se | o.sco1 

[yes 6 | azenar [606s | esza2 | oessi | osee77 | 0.sse05_ 

-—t9 [80 | aazrse | ecaooe | asses | o27ert | ots0s | 58st 
ea | a7en08 
i © 
ee 
7 
oe 
“oF 
a 





D2 4.91666 | 7.37498 | 9.83331 | 0.30729 | 0.46094 | 0.61458 
D3 4.93996 | 7.40994 | 9.87992 | 0.30875 | 0.46312 | 0.61749 


D4 
D5 


4.96326 0.46531 | 0.62041 
4.98656 0.46749 | 0.62332 
5.00986 0.46967 | 0.62623 | 
5.03316 0.47186 | 0.62915 
5.05647 0.47404 | 0.63206 
5.07977 0.47623 | 0.63497. 









NM] NM 
ed, | oh 
W|] PM 


ie) 
— 
ff 


215 
216 
217 


D7 
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Table 12-2. Calculated Time-out Values (45MHz System Bus Clock). 


[wR errs (158) | ab wiz | SOM [ast | 30 we 


DECIMAL TMR REGISTER BITS [2:1]=10 TMR REGISTER BITS [2:1]=01 
(SYSTEM CLOCK/16) (SYSTEM CLOCK/1) 
































234 


5.4759 8.21385 10.95179 | 0.34224 | 0.51337 0.68449 


239 i ee 


5.59241 8.38861 11.18481 0.34953 | 0.52429 0.69905 
5.61571 8.42356 11.23141 0.35098 | 0.52647 0.70196 


NO 
& 
>) 





1 


| 2 

EC 

D 

E 

EF 

FO 

F1 

F2 


[s.708et | 


Nh 
BN 
No 


ms 











244 F4 5.70891 | 8.56337 | 11.41783 | 0.35681 | 0.53521 | 0.71361 
245 F 8.59832 | 11.46443 | 0.35826 | 0.5374 | 0.71653 
246 F 5.75552 | 8.63328 | 11.51103 | 0.35972 | 0.53958 | 0.71944 


247 5.77882 8.66823 11.55764 | 0.36118 | 0.54176 0.72235 
5.80212 8.70318 11.60424 | 0.36263 | 0.54395 0.72527 
5.82542 8.73813 11.65084 | 0.36409 | 0.54613 0.72818 
5.84872 8.77309 11.69745 | 0.86555 | 0.54832 0.73109 

5.87203 8.80804 11.74405 0.367 0.5505 0.734 


9 
6 
7 
248 8 
249 


NO 
O1 
© 


52 


12.3.1.7 CODE EXAMPLE. The following code provides an example of how to initialize 
TIMER 1 and how to use the timer for counting time-out periods. 


oO 
— 


9 
A 
B 
C 
D 
E 


F 
F 
F 
F 
F 
F 
F 
F 
F 


F 


N 
O1 
on 
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MBARx equ $10000 
EQU | 


TMR1 
TMR2 
TRR1 
TRR2 
TCR 
TCR2 
TCN1 
TCN2 
TER1 
TER2 


EQU 
EQU 
EQU 
EQU 
EQU 
EQU 
EQU 
EQU 
EQU 


;Defines the base of the module base 


MBARx+$140 ;Timer 1 register 
MBARX+$180 ;Timer 2 register 
MBARX+$144 ;Timer 1 reference register 
MBARX+$184 ;Timer 2 reference register 
MBARx+$148 ;Timer 1 capture register 
MBARX+$188 ;Timer 2 capture register 
MBARX+$14C ;Timer 1 counter register 
MBARX+$18C ;Timer 2 counter register 
MBARx+$151 ;Timer 1 event register 
MBARx+$191 ;Timer 2 event register 


* TMR1 is defined as: 
divide clock by 256 


*[15:8]=SFF, 
ae Ie es 


cae We ae 
ae oy 
*[4] 
ia 3 
Bile 
* [0] 


6] = 
nA 
='OQ 


— il Caer 
"10% 
= SO: 


1] = 


move 


move 


Move 
move 


Move 
move 


J 


‘ 
i 


-W 
-W 


-W 
WwW 


-W 
-W 


disable interrupt 


output=active-low pulse 
disable ref.interrupt 
restart mode enabled 


master clock/16 


timerl enabled 


#SFF2C,D0 
DO, TMR1 


#$0000,D0 
DO, TCN1 


#AFAF , DO 
#D0,TRR1 


;writing to the timer counter with any 
;value resets it to zero 


sset the timer 1 reference to be 
;defined as SAFAF 


out loops. A time-out occurs when the reference value is hit. In this 


p12 The code below provides a simple example of using Timer 1. It simply counts time- 





example, 


timerl_ex 


cir. 
cir. 
Cle: 


move 
move 


move 
move 


move. 


bset 


move. 


T1_LOOP 


12-14 


move. 


btst 
beq 


1 
uh 
aL 


-W 
,W 


me: 
Me 


DO 
Di 
D2 


#50000, D0 
DO, TCN1 


#$03,D0 
DO, TER1 


TMR1 ,; DO 
#0,D0 
DO, TMR1 


TER1,D1 
#1,D1 
-T1 LOOP 


the reference value was defined to be SAFAF. 


sreset the counter to $0000 


;writing “1” to the “REF” & “CAP” bits of 
;the TER register clears the event flags 


:save the contents of TMR1 while setting 


;the 0 bit. This enables Timer 1 and starts counting 
;load the value back into the register 


;load the timerl event register and 
;see if bit 1 (REF) has been set 
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addi.l 
cemp.L 
beq 


move.b 
move.b 


jmp 


T1l_FINISH 
HALT 


MOTOROLA 


#1,D2 
#5,D2 
T1l_ FINISH 


DO; TERL 
T1_LOOP 


TIMER MODULE 


;Increment D2 
;Has D2 reached 5 yet (i.e. timer ref has timed) 
;If so, end timerl example. Otherwise jump back 


swriting “1” to the “REF” bit in 
;the TER register clears the event flag 


;END PROCESSING. EXAMPLE IS FINISHED 
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SECTION 13 
DMA CONTROLLER MODULE 


13.1 INTRODUCTION 


The Direct Memory Access Controller (DMA) Module provides a quick and efficient process 
for moving blocks of data with minimal processor overhead. The DMA module, shown in 
Figure 13-1, provides four channels that allow byte, word, or longword operand transfers. 
These transfers can be single or dual address to off-chip devices or dual address to on-chip 
devices. 
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CHANNEL1 | CHANNEL2 | CHANNEL3 | CHANNEL4 


DAR DAR DAR DAR 





























EXTERNAL 
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S MODULE 
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CHANNEL 
ENABLES 


CHANNEL 
ATTRIBUTES 





CHANNEL REQUESTS 
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MASTER 
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CONTROL 
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EXTERNAL EXTERNAL SEALs 
BUS READ BUS WRITE SIGNALS 
DATA DATA 





Figure 13-1. DMA Signal Diagram 


The DMA contains the following features: 


e Four fully independent programmable DMA Controller Module channels/slave bus mod- 
ules 


Auto-alignment feature for source or destination accesses 
Single and dual address transfers 
e Two external request pins provided 


Channel arbitration on transfer boundaries 
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e¢ Data transfers in 8-, 16-, 32- or 128-bit blocks via a 16-byte buffer 
e Supports burst and cycle steal transfers 

e Independent transfer widths for source and destination 

e Independent source and destination address registers 

e Provide two clock data transfers 


13.2 DMA SIGNAL DESCRIPTION 


This subsection contains a brief description of the DMA module signals that provide 
handshake control for either a source or destination external device. See Table 13-1 for 
details. 


Table 13-1. DMA Signals. 


SIGNAL NAME DIRECTION DESCRIPTION 
DREQ|1:0] External DMA request 


13.2.1 DMA Request (DREOQ[1:0]/PP[6:5]) 


These multiplexed pins can serve as the DMA request inputs, or as two bits of the parallel 
port. Programming the Pin Assignment Register (PAR) in the SCM determines the function 
of each of these three multiplexed pins. You can program these pins on a bit-by-bit basis. 














These active-low inputs are asserted by a peripheral device to request an operand transfer 
between that peripheral and memory. 


The DREQ signals are asserted to initiate DMA accesses in the respective channels. The 
system should force any unused DREQ signals to a logic high state. Although each channel 
has an individual DREQ pin, in the MCF5307 implementation only the DREQ for channel 0 
and 1 go to external pins. The DREQ for channel 2 and channel 3 are connected to the 
internal slave bus interrupt pins of VARTO and UART1 respectively. 


13.3 DMA MODULE OVERVIEW 


The DMA controller module transfers data at very high rates, usually much faster than the 
ColdFire core under software control can handle. The term “DMA’ refers to a peripheral 
device’s capability to access memory in a system in the same manner as a microprocessor 
does. DMA operations can greatly increase overall system performance. 














The DMA module consists of four independent channels. The term DMA is used throughout 
this section to reference any of the four channels as they are all functionally equivalent. 
Therefore, it is impossible to implicitly address all four DMA channels at the same time. The 
MCF5307 on-chip peripherals do not support the single-address transfer mode. 


DMA requests can be internally generated by the processor writing to the start bit or 
externally generated by a device. The processor can program the amount of bus bandwidth 
allocated for the DMA for each channel. The DMA channels support two transfer modes: 
continuous mode and cycle steal mode. 


MOTOROLA MCF5307 User’s Manual 13-3 








DMA CONTROLLER MODULE 


The DMA controller supports single- and dual-address transfers. In single-address mode, a 
channel supports 32 bits of address and 32 bits of data. Single-address transfers can be 
started by an external device using the request signal. The DMA provides address and 
control signals during a single-address transfer. The requesting device either sends or 
receives data to or from the specified address (see Figure 13-2). In dual-address mode, a 
channel supports 32 bits of address and 32 bits of data. The dual-address transfers can be 
started by either the internal request mode or by an external device using the request signal. 
In this mode, two bus transfers occur, one from a source device and the other to a 
destination device (see Figure 13-3). 


Any operation involving the DMA will follow the same basic steps: channel initialization, data 
transfer, and channel termination. In the channel initialization step, the DMA channel 
registers are loaded with control information, address pointers, and a byte transfer count. 
The channel is then started. During the data transfer step, the DMA accepts requests for 
operand transfers and provides addressing and bus control for the transfers. The channel 
termination step occurs after operation is complete. The channel indicates the status of the 
operation in the channel status register. 
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Figure 13-2. Single-Address Transfers 
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Figure 13-3. Dual-Address Transfer 


13.4 DMA CONTROLLER MODULE PROGRAMMING MODEL 


The registers of each DMA Controller Module channel are mapped into memory as shown 
in Figure 13-5. The base address for each channel of the DMA Controller Module is 
displayed in Figure 13-4. 






MBAR+DMA1SAR 
MBAR+DMA2SAR 
MBAR +DMA3SAR 
Figure 13-4. DMA Controller Module Channel Offsets 











The DMA Controller Module register set controls the DMA Controller module. This 
subsection describes each of the internal registers and the bit assignment for each register. 
Note that there is no mechanism for the prevention of writes to control registers during DMA 
transfers. 


Address [31:0] | 
Offset 
$300 
$308 
$300 
$340 
$34 


Figure 13-5. DMA Controller Module Register Model Per Channel 
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$308 DMA Control Register 
$300 Byle Count Registers 
$3D0 Status Register3 3 Reserved 


$304 
Figure 13-5. DMA Controller Module Register Model Per Channel 





13.4.1 Source Address Register (SAR) 


The source address register (SAR) is a 32-bit register containing the address from which the 
DMA Controller Module will request data during a transfer. 


31 30 29 28 2 26 25 24 23. 22 21 20 19 18 17 16 


7 
[SAR3i] SAR3O] SARZ8] SARZ6] SAR2T] SARZ6] SAR2S] GARZA] SARZS] SARZ2] SARZI] SARZO] SARTO] SARTE] SARTT] SARTG 


Reset: 
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 


15 14 13 12 11 10 9 8 7 6 





5 4 3 2 1 0 
[SARTS] SART4] SARTG] SART2] SARI] SARTO] SARO] GARG] SAAT] GARG] SARS] SARA] SARS] SAR] SARI] SARO] 


0 0 0 0 0 0 0 0 0 0 0 0 0 Oo 0 0 


Source Address Register 


In Single Address Mode, the SAR provides the address regardless of the direction. 


13-6 MCF5307 User’s Manual MOTOROLA 


DMA CONTROLLER MODULE 


13.4.2 Destination Address Register (DAR) 


The destination address register (DAR) is a 32-bit register containing the address to which 
the DMA Controller Module will send data during a transfer. Note that this register is only 
used during dual address transfers. 


31 30 29 28 27 26 20 24 23 22 21 20 ~—s«19 18 17 16 








Destination Address Register (DAR) 


13.4.3 Byte Count Register (BCR) 


The byte count register (BCR) is a 16-bit register containing the number of bytes remaining 
to be transferred for a given block. The BCR count is the number of bytes remaining to be 
written. 


The BCR decrements on the successful completion of the address phase of either a write 
transfer in dual address mode or any transfer in single address mode. The amount the BCR 
decrements is 1, 2, 4, or 16 for byte, word, longword, or line accesses, respectively. 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


Reset: 
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 





Byte Count Register (BCR) 


The DONE bit in the DMA Status Register is set when the entire block transfer is complete. 


When a transfer sequence is initiated and the BCR contains a value that is not divisible by 
16, 4, or 2 when the DMA is configured for line, longword, or word transfers, respectively, 
the configuration error bit in the DMA status register (DSR) is set and the transfer is not 
performed. 
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13.4.4 DMA Control Register 


The DMA control register (DCR) is a 16-bit register that controls the configuration of the | 
DMA Controller Module. 


a LS 


Reset: 
0. 0 0 0 0 0 0 0 0 0 0 0. 0 0 0 0 


INT—Interrupt on completion of transfer. 


This field controls whether an interrupt is to be generated at the completion of the transfer 
or occurrence of an error condition. 


1 = An internal interrupt signal asserts at the completion of a transfer. 
O = No interrupt is generated. 


EEXT—Enable External Request. 


1 = Enables the external request signal to affect transfer initiation. The START bit is al- 
ways enabled. 
0 = The external request is ignored. 


NOTE 


There is no logic precluding collisions with START bit and DREQ 
signal except for EEXT. Use caution when initiating a DMA 
transfer with the START bit while EEXT=1. 


CS—Cycle Steal. 


1 = Forces a single read/write transfer per request. The request may be internal by set- 
ting the START bit, or external by asserting the DREQ signal. 
0 = The DMA performs continuous read/write transfers until the BCR decrements to 0 


AA—Auto-Align 


This bit and the size bits determine whether the source or destination is auto-aligned. Auto 
alignment means that the accesses will be optimized based on the address value and the 
programmed size.For more information see 13.7.2.2 Auto Alignment. 


1 = If the SSIZE bits indicate a larger or equivalent transfer size with respect to DSIZE, 
then the source accesses are auto-aligned. If the DSIZE bits indicate a larger trans- 
fer size than SSIZE, then the destination accesses are auto-aligned. Source align- 
‘ment takes precedence over destination alignment. If auto-alignment is enabled, 
the appropriate address register increments, regardless of the state of DINC or 
SINC. 

O = No accesses are auto-aligned 


BWC—Bandwidth Control 


These three bits are decoded to provide for internal bandwidth control. When the byte 
count has reached the programmed BWC boundary, the request signal to the internal ar- 
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biter is negated until the completion of the data access to enable the arbiter to allow an- 
other master access to the bus. Table 13-2 shows the encodings for these bits. When the 
bits are cleared, the DMA does not negate its request. The 000 encoding will assert a pri- 
ority signal when the channel is active, signaling that the transfer has been programmed 
for a higher priority. The table shows BCR values at which the bus is relinquished. For ex- 
ample, if BWC = 001 and the BCR is set to 516, the bus is relinquished after four bytes 
are transferred. 


Table 13-2. BWC Encoding 


| 











SAA—Single Address Access 


1 = The DMA channel is in single address mode. The DMA provides an address from 
the SAR and directional control, bit S_RW, to allow two peripherals (one may be 
memory) to exchange data within a single access. Data will not be stored by the 
DMA. 

0 = The DMA channel is in dual address mode 


S_RW-—Single Address Access Read/Write Value. 


This bit specifies the value of the master read signal during single address accesses. This 
provides directional control to the master bus controller. 


1 = Forces the master read signal to a logic high state 
O = Forces the master read signal to a logic low state 


The bit is only valid when the SAA bit is set. 


SINC—Source Increment 
This bit controls whether the source address increments after each successful transfer. 


1 = The SAR increments by 1, 2, 4, or 16, depending upon the size of the transfer 
O = There is no change to the SAR after a successful transfer 


SSIZE—Source Size 


This field controls the size of the source bus cycle that the DMA Controller Module is 
running. See Table 13-3 for the encoding of this field. 
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Table 13-3. SSIZE Encoding 
[SSIZE_| TRANSFER SIZE 








DiINC—Destination Increment 
This bit controls whether the destination address increments after each successful transfer. 


1 = The DAR increments by 1, 2, 4, or 16 depending upon the size of the transfer 
- 0= There is no change to the DAR after a successful transfer 


DS|IZE—Destination Size 


This field controls the size of the destination bus cycle that the DMA Controller Module is 
running. See Table 13-4 for the encoding of this field. 


Table 13-4. DSIZE Encoding 








START—Start Transfer 


1 = Indicates to the DMA to begin the transfer according to the values in the control 
registers | 
This bit is self-clearing after one clock and is always read as a logic 0. 


13.4.5 DMA Status Register (DSR) 


The DMA Status Register (DSR) is an 8-bit register that reports on the status of the DMA 
Controller Module. On recognition of an event, the DMA Controller Module sets the 
corresponding bit in the DSR. Only writes to bit 0 of the DSR will have any effect. Setting the 
DONE bit creates a single-cycle pulse, which will reset the channel thus clearing all bits in 
the register. This must be done at the completion of a transfer, though it may be set during 
a transfer to abort the transfer. 


7 


6 5 4 3 2 1 0 
[= [ce [ees [sep [= 7 Reo] psy [ DONE 
Reset: 
0 0 0 - 0 0 0 


Bit 7—Reserved © 


CE—Configuration Error 


A configuration error results when either the number of bytes represented by the BCR is not 
consistent with the requested source or destination transfer size, or the SAR or DAR 
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contains an address that does not match the requested transfer size for the source or 
destination, respectively. The bit is cleared during a hardware reset, or by writing a logic one 
to the DONE bit of the DSR. 


1 = A configuration error has occurred 
0 = No configuration error exists 


BES—Bus Error on Source 


1 = The DMA channel has terminated with a bus error either during the read portion of 
a transfer or during an access in single address mode (SAA = 1) 
0 = No bus error has occurred 


BED—Bus Error on Destination 


1 = The DMA channel has terminated with a bus error during the write portion of a 
transfer 
O = No bus error has occurred 


Bit 3 —Reserved 


REQ—Request 
1 = The DMA channel has transfers remaining and the channel is not selected 
0 = There is no request pending or the channel is currently active. The bit is cleared 
when the channel is selected. 


BSY—Busy 
1 = This bit is set the first time the channel is enabled after a transfer is initiated 
0 = DMA channel is not active. This bit is cleared to O when the DMA has finished the 
last transaction 


DONE—Transaction Done 


This bit may be read or written and is set when all DMA Controller Module transactions have 
completed normally, as determined by the transfer count or error conditions. When the BCR 
reaches zero, DONE is set at the successful conclusion of the final DMA Controller Module 
transfer 





This bit is written with a 1 to reset the DMA control/state bits and can be used in an interrupt 
handler to clear the DMA interrupt and the DONE and error bits. It can also be used to kill a 
transfer in progress by resetting state bits. Writing a O to this location has no affect. 


1= DMA transfer is complete 
O= Writing or reading a 0 at this bit location has no affect. 
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13.4.6 DMA Interrupt Vector Register 


The DMA Interrupt Vector Register (DIVR) is an 8-bit register, which is driven out onto the 
slave bus in response to an acknowledge cycle. 


7 6 5 4 3 2 1 0 
RESET: 
0 0 0 0 1 | 1 | 


DMA Interrupt Vector Register 


13.5 TRANSFER REQUEST GENERATION 


The DMA channel supports two types of request generation methods: internal and external. 
You can program both types of requests to limit the amount of bus use and can be either 
cycle-steal mode or continuous mode. The EEXT field in the DCR in the programs the 
request-generation method used for the channel. 


13.5.1 Cycle-Steal Mode 


When the CS field in the DCR is set, the DMA is in cycle-steal mode. This means that only 
one complete transfer from source to destination will take place for each request that the 
module receives. The request can be either internal or external depending on how the EEXT 
field is programmed. 


13.5.2 Continuous Mode 


If the CS field in the DCR is cleared, the DMA is in continuous mode. After a request is 
asserted, either internal or external, the DMA will continuously transfer data until the BCR is 
zero or the DONE bit in the DSR is set. 


The continuous mode can be run at either the maximum rate or a limited rate. The maximum 
rate of transfer can be achieved if the BWC field in the DCR is programmed to be 000. Then 
the DMA channel that has started a transfer will continue until the BCR decrements to zero 
or a1 is written to the DONE bit in the DSR. 


A limited rate can be achieved by programming the BWC field to be anything except 000. 
The DMA will then perform the specified number of transfers and surrender the bus to allow 
another device to use the bus. In this mode, the DMA will negate its internal bus request on 
the last transfer before the boundary programmed in the BWC field. After the transfer is 
complete, it will then assert its bus request again to regain mastership at the earliest 
possible time as determined by the internal bus arbiter. The minimum amount of time that 
the DMA will not have the bus is one bus cycle. | 


13.6 DATA TRANSFER MODES 


Each DMA channel supports single- and dual-address transfers. The single-address 
transfer mode consists of one DMA bus cycle, which allows either a read or a write cycle to 
occur. The dual-address transfer mode consists of a Source operand read and a destination 
operand write. 
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13.6.1 Single-Address Transactions 


The DMA Controller Module begins a single address transfer sequence when the SAA bit is 
set while a DMA request is made. If no error conditions exist, the REQ bit is set. When the 
channel is enabled, the BSY bit is set and the REQ bit is cleared. The SAR contents are then 
driven onto the master address bus and the value of the S_RW bit is driven onto the master 
read signal. The BCR decrements on successful address phase accesses until it reaches 0, 
and the DONE bit is set. 


In the event of a termination error, the BES and DONE bit of the DSR are set and no further 
DMA Controller Module transactions are attempted. 


13.6.2 Dual-Address Transactions 


The DMA Controller Module begins a dual-address transfer sequence when the SAA bit is 
cleared while a DMA request is made. If no error condition exists, the REQ bit of the DSR is 
set. 


13.6.2.1 DUAL-ADDRESS READS. The DMA Controller Module will drive the value in the 
SAR onto the internal address bus. If the SINC bit of the DCR is set, then the SAR 
increments by the appropriate number of bytes upon a successful read cycle. When the 
appropriate number of read cycles completes successfully, the DMA initiates the write 
portion of the transfer. 


In the event of a termination error, the BES and DONE bit of the DSR are set, and no further 
DMA Controller Module transactions are attempted. 


13.6.2.2 DUAL-ADDRESS WRITES. The DMA Controller Module will drive the value in the 
DAR onto the master address bus. If the DINC bit of the DCR is set, the DAR increments by 
the appropriate number of bytes at the completion of a successful write cycle. The BCR 
decrements by the appropriate number of bytes. If the BCR equals zero, the DONE bit is 
set. If the BCR is greater than 0, then another read/write transfer is initiated. If the BCR is a 
multiple of the programmed BWC, then the DMA request signal is negated until termination 
of the bus cycle to allow the internal arbiter to switch masters. 


In the event of a termination error, the BED and DONE bit of the DSR are set, and no further 
DMA Controller Module transactions are attempted. 


13.7 DMA CONTROLLER MODULE FUNCTIONAL DESCRIPTION 


In the following descriptions, “DMA request” implies that the START bit is set or the DREQ 
signal is asserted while the EEXT bit is set. The START bit is cleared when the channel 
begins an internal access. Before initiating a transfer request, the DMA Controller Module 
first verifies that the source size and destination size (dual address only), as configured in 
the DCR, are consistent with the source address and destination address. Ifa misalignment 
is detected, no transfer will occur and the CE bit of the DSR will be set. 


The CE bit is also set if the BCR contains a value inconsistent with both the destination size 
(dual address only) and the source size. Depending on the configuration of the DCR, an 
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interrupt event may be issued when the CE bit is set. Note that if the AA bit is set, error 
checking is performed only on the appropriate registers. _ 


A “read/write” transfer refers to a dual-address access in which a number of bytes are read 
from the source address and written to the destination address. The number of bytes 
transferred is determined by the larger of the sizes specified by the source and destination 
size encodings. a a 


The source and destination address registers (SAR and DAR) increment at the completion 
of a successful address phase. The BCR decrements at the completion of a successful 
address phase write when SAA=0 or any successful address phase when SAA=1. A 
successful address phase occurs when a valid address request is not held by the arbiter. 


13.7.1 Channel Initialization and Startup 


Before starting a block transfer operation, the channel registers must be initialized with 
information describing the channel configuration, request-generation method, and data 
block. This initialization is accomplished by programming the appropriate information into 
the channel registers. | 


13.7.1.1 CHANNEL PRIORITIZATION. The four DMA channels are prioritized in ascending 
order or as determined by the BWC bits in the DCR. If the BWC bits for a DMA channel are 
set to 000, then that channel has priority over the channel immediately preceding it. For 
example, if DMA channel 2 has the BWC bits set to 000, it has priority over DMA channel 1 
but not over DMA channel 2. This is assuming that DMA channel 1 has something other than 
all zeroes in the BWC bits. 


Another example would be a case where the BWC bits in DMA 2 and DMA 1 are all zeroes. 
In this case, DMA 1 would have priority over DMA 0 and DMA 2. The BWC bits being zero 
in DMA 2 in this case have no effect on prioritization. 


In the case of simultaneous external requests, the prioritization is either ascending or as 
determined by each channels BWC bits as described in the previous paragraphs. 


13.7.1.2 PROGRAMMING THE DMA CONTROLLER MODULE. The DMA Controller 
Module is programmed via the slave bus in the ColdFire architecture. The DMA Controller 
Module monitors every slave bus cycle, and when the module enables assert, the proper 
action is taken to perform a read or a write, as requested by the slave bus controller. Some 
general comments on programming the DMA follow: 


e No mechanism exists for preventing writes to control registers during DMA accesses 
e |f the BWC of sequential channels are equivalent, channel priority is in ascending order 


The SAR is loaded with the source (read) address. If the transfer is from a peripheral device 
to memory, the source address is the location of the peripheral data register. If the transfer 
is from memory to a peripheral device or memory to memory, the source address is the 
starting address of the data block. This address can be any byte address. In the single- 
address mode, this register is used regardless of the transfer direction. 
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The DAR should contain the destination (write) address. If the transfer is from a peripheral 
device to memory, or memory to memory, the DAR is loaded with the starting address of the 
data block to be written. If the transfer is from memory to a peripheral device, the DAR is 
loaded with the address of the peripheral data register. This address can be any byte 
address. In the single-address mode, this register is not used. 


The manner in which the SAR and DAR change after each cycle depends on the values in 
the DCR SSIZE and DSIZE fields and the SINC and DINC bits, and the starting address in 
the SAR and DAR. If programmed to increment, the increment value is 1, 2, 4, or 16 for byte, 
word, longword, or line operands, respectively. If the address register is programmed to 
remain unchanged (no count), the register is not incremented after the operand transfer. 


The BCR must be loaded with the number of byte transfers that are to occur. This register 
is decremented by 1, 2, 4, or 16 at the end of each transfer. The DSR must be cleared for 
channel startup. 


Once the channel has been initialized, it is started by writing a one to the START bit in the 
DCR or asserting the DREQ signal, depending on the status of the EEXT bit in the DCR. 
Programming the channel for internal request causes the channel to request the bus and 
start transferring data immediately. If the channel is programmed for external request, 
DREQ must be asserted before the channel requests the bus. 








If any fields in the DCR are modified while the channel is active, that change is effective 
immediately. To avoid any problems with changing the setup for the DMA channel, a 1 
should be written to the DONE bit in the DSR to stop the DMA channel. 


13.7.2 Data Transfers 


13.7.2.1 EXTERNAL REQUEST OPERATION. Each channel has the feature of interfacing 
to an external module to initiate transfers to the module. In the MCF5307 device, the 
external requests for channel 1 and channel 2 are connected to external pins. The request 
for channel 3 and channel 4 are connected internally to the slave bus interrupt pins of the 
UARTO and UART1 modules, respectively. If the EEXT bit is set, when the DREQ signal 
asserts, the DMA will initiate a transfer provided the channel is idle. If the CS (cycle steal) 
bit is set, a single read/write transfer will occur on the master bus. If the CS bit is clear, 
multiple read/write transfers occur on the master bus as programmed. The transfer mode 
pins can be used to provide an external request acknowledge response. The DREQ signal 
is not required to be negated until the DONE bit of the DSR asserts. In cycle-steal mode, the 
maximum length of DREQ assertion to maintain a single transfer depends on configuration. 
In the worst case of a single-address access, byte accesses, and idle channels, DREQ may 
be asserted for no more than four rising clock edges (see Figure 13-6). 














see Figure 13-7 for timing relationships for a dual-address transfer using cycle-steal mode. 
The maximum assertion time for DREQ in this configuration is five clocks. 





When an access occurs that was initiated by an DREQ signal, the transfer mode signals will 
indicate an alternate master cycle, while the transfer modifier signals will indicate that the 
cycle is due to an external request. To create an external DMA acknowledge signal, it may 
be necessary to decode the address of the peripheral along with a combination of the 
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Figure 13-6. External Request Timing - Cycle-Steal Mode, Single-Address Mode 
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Figure 13-7. External Request Timing - Cycle-Steal Mode, Dual-Address Mode 


transfer mode and transfer-type signals. To create an external DMA acknowledge signal for 
block transfers, you may count the transfers or compare the address to a stored final 
address to assert the DMA acknowledge to the peripheral. 


13.7.2.2 AUTO ALIGNMENT. This feature allows for block transfers to occur at the most 
optimum size possible based on the address, byte count, and programmed size. To use this 
feature, AA in the DCR must be set. The source is auto-aligned when the SSIZE bits indicate 
a larger transfer size compared to DSIZE. Source alignment takes precedence over the 
destination when the source and destination sizes are equal. Otherwise, the destination is 
auto-aligned. The address register that is chosen for alignment increments regardless of the 
value of the increment bit. Configuration error checking is performed on the registers that 
are not chosen for alignment. 


lf the BCR contains a value greater then 16, the address will determine the size of the 
transfer. Single byte, word or longword transfers will occur until the address is aligned to the 
programmed size boundary, at which time the programmed size accesses begin. When the 
BCR is less than 16 at the beginning of a read/write transfer, the number of bytes remaining 
will dictate the transfer size, longword, word or byte. 


For example, 
AA = 1, SAR = $0001, BCR = $000, SSIZE = 00 (longword) and DSIZE = 01 (byte), 


Because the SSIZE > DSIZE, the source is auto-aligned. Error checking is performed on the 
destination registers. The sequence of accesses is as follows: 
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Read byte from $0001 - write byte, increment SAR 

Read word from $0002 - write 2 bytes, increment SAR 
Read long word from $0004 - write 4 bytes, increment SAR 
Repeat longwords until SAR = $00f0 

5. Read byte from $00f0 - write byte, increment SAR. 


If DSIZE is set to another size, then the data writes are optimized to write the largest size 
allowed based on the address, but not exceeding the configured size. 


gee ga eee 


13.7.2.3 BANDWIDTH CONTROL. This feature provides a mechanism that can force the 
DMA off the master bus, allowing another master access. This feature can simplify the 
master bus arbiter design by making arbitration programmable. The decode of the BWC 
provides 7 levels of block transfer sizes. If the BCR decrements to a value equivalent to the 
decode of the BWC, the DMA master bus request negates until termination of the bus cycle. 
The arbiter may then choose to switch the bus to another master, should a request be 
pending. Note that if AA is set, the BCR may skip over the programmed boundary. In this 
case, the DMA master bus request will not negate. If the BWC = 0, the request signal will 
remain asserted until the BCR reaches 0. In addition, an internal signal will assert to indicate 
that the channel has been programmed to have priority. Note that in this arbitration scheme, 
the arbiter can always force the DMA to relinquish the bus. 


13.7.3 Channel Termination 


13.7.3.1 ERROR CONDITIONS. When the DMA Controller Module encounters a read or 
write cycle that terminates with an error condition, the appropriate bit of the DSR is set, 
depending on whether the bus cycle was a read (BES) or a write (BED). The DMA transfers 
are then halted. If the error condition occurred during a write cycle, any data remaining in 
the internal holding register is lost. 


13.7.3.2 INTERRUPTS. If the INT bit of the DCR is set, the DMA will drive the appropriate 
slave bus interrupt signal. A processor can then read the DSR to determine if the transfer 
terminated successfully or with an error. The DONE bit of the DSR is then written with a 1 
to clear the interrupt, along with clearing the DONE and error bits. 
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SECTION 14 
UART MODULES 


The MCF5307 contains two universal asynchronous/synchronous receiver/transmitters 
(UARTs), which act independently. All references to “UART” refer to one of these instances. 
Each UART is clocked by the system clock, eliminating the need for an external crystal. 


The UART module interfaces directly to the CPU. Shown in Figure 14-1, the UART module, 
consists of the following major functional areas: 


¢ Serial Communication Channel 

e Sixteen Bit Timer for Baud Rate Generation 
e Internal Channel Control Logic 

e Interrupt Control Logic 


CTS 
SERIAL COMMUNICATIONS 
CHANNEL RTS 
RXD 
TXD 
16-BIT TIMER 
FOR BAUD RATE SYSTEM BUS CLOCK 
OR 
SENEDATON EXTERNAL CLOCK 


INTERNAL CHANNEL 
CONTROL LOGIC 





INTERRUPT CONTROL | 


LOGIC 





Figure 14-1. Simplified Block Diagram 
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14.1 SERIAL MODULE OVERVIEW 


The MCF5307 contains two independent UART modules. Features of each UART module 
are as follows: 


e Each UART is clocked by the system clock, eliminating the need for external crystal 
e Full-Duplex Asynchronous/Synchronous Receiver/Transmitter Channel 

¢ Quadruple-Buffered Receiver 

e Double-Buffered Transmitter 


° Independently Programmable Baud Rate for Receiver and Transmitter Selectable from: 
~ — Timer-Generated Baud Rate 


¢ Programmable Data Format: 
— Five to Eight Data Bits Plus Parity 


— Odd, Even, No Parity, or Force Parity 
— One, One and a Half or Two Stop Bits 


e Programmable Channel Modes: 
— Normal (Full Duplex) 


— Automatic Echo 
— Local Loopback 
— Remote Loopback 
e Automatic Wakeup Mode for Multidrop Applications 
e Four Maskable Interrupt Conditions | 
e Parity, Framing, and Overrun Error Detection 
e False-Start Bit Detection 
e Line-Break Detection and Generation 
e Detection of Breaks Originating in the Middle of a Character 
e Start/End Break Interrupt/Status 


14.1.1 Serial Communication Channel 


The communication channel provides a full-duplex asynchronous/synchronous receiver and 
transmitter using an operating frequency derived from the system clock. 


The transmitter accepts parallel data from the CPU. It converts the data to a serial bit stream 
inserting the appropriate start, stop, and optional parity bits. Finally, it outputs a composite 
serial data stream on the channel transmitter serial data output (TxD). Refer to Section 
14.3.4.1 Transmitter for additional information. 


The receiver accepts serial data on the channel receiver serial data input (RxD), converts it 
to parallel format, checks for a start bit, stop bit, parity (if any), or break condition, and trans- 
fers the assembled character onto the bus during read operations. The receiver may be 
polled or interrupt driven. Refer to Section 14.3.4.2 Receiver for additional information. 
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14.1.2 Interrupt Control Logic 


An internal interrupt request signal (IRQ) is provided to notify the interrupt controller of an 
interrupt condition. The output is the logical NOR of all (up to four) unmasked interrupt status 
bits in the interrupt status register (UISR). 


The interrupt level of the UART module is programmed in the interrupt controller external to 
the UART module. The UART can be configured to supply the autovector for the interrupt 
level programmed, or to supply the vector from the UART Interrupt Vector Register (UIVR) 
when the UART interrupt is acknowledged. 


The interrupt level, priority within the level, and auto-vectoring capability can all be pro- 
grammed in the SIM register |CR12 for UART1 and ICR13 for UART2. 


14.1.3 Comparison of UART Module to MC68681 


The MCF5307 is code compatible with the MC68681, except that only channel A is imple- 
mented, and the system clock is used as a clock source in timer mode. The input and output 
port lines (IPx and OPx) are not implemented except for CTS and RTS functions. 
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14.2 UART MODULE SIGNAL DEFINITIONS 


The following paragraphs contain a brief description of the UART module signals. Figure 14- 
2 shows both the external and internal signal groups. 


NOTE 


The terms assertion and negation are used throughout this sec- 
tion to avoid confusion when dealing with a mixture of active-low 
and active-high signals. The term assert or assertion indicates 
that a signal is active or true, independent of the level represent- 
ed by a high or low voltage. The term negate or negation indi- 
cates that a signal is inactive or false. 


14.2.1 Transmitter Serial Data Output (TxD) 


The transmitter serial data output signal is held high (‘mark' condition) when the transmitter 
is disabled, idle, or operating in the local loopback mode. Data is shifted out on this signal 
on the falling edge of the clock source, with the least significant bit transmitted first. 


14.2.2 Receiver Serial Data Input (RxD) 

Data received on the receiver serial data input signal is sampled on the rising edge of the 
clock source, with the least significant bit received first. 

14.2.3 Clear-To-Send (CTS) 

This active-low input is the clear-to-send input. It can generate an interrupt on change-of- 
state. 

14.2.4 Request-To-Send (RTS) 


RTS is an active-low output signal that can be programmed to be automatically negated and 
asserted by either the receiver or transmitter. When connected to the clear-to-send (CTS) 
input of a transmitter, this signal can be used to control serial data flow. It is important to note 
that RTS of UART2 is muxed with RSTO. This muxing is controlled by the PAR register in 
the SIM. 
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Figure 14-2. External and Internal Interface Signals 
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14.3 OPERATION 


The following paragraphs describe the operation of the baud rate generator, transmitter and 
receiver, and other functional operating modes of the UART module. 


14.3.1 Baud-Rate Generator Logic 


The system clock serves as the basic timing reference for the Baud rate Generator Logic. 

The Baud rate Generator logic consists of a baud-rate generator and a programmable 16- 
bit timer. The baud-rate generator is used to generate standard baud rates if the system bus 
clock is 3.6864MHz. Since this is not normally the case, it is recommended to use the 16-bit 
timer as a programmable divider. 


Note 
The system bus clock is defined as the clock signal from the PLL 
(BCLKO). 


The processor's main clock is driven into the PLL on the CLKIN 
pin. The PLL takes this clock and multiplies it by 2 (PSTCLK). 


Then, for the internal modules, the clock is programmable to be 


divided by 2, 3, or 4 (BCLKO). 


For example, an external processor clock of 45 MHz would run 
the CPU core at 90 MHz and divide the 90 MHz clock by 2, 3, or 
4. This would clock the internal modules (such as the UARTs) at 
45, 30, or 22.5 MHz respectively. See Section 4 Phase Lock 
Loop (PLL) for more details. 


14.3.2 Baud-Rate Generator/Timer 


The 16-bit timer is used as a baud rate generator and provides a synchronous clock mode 
of operation when used as a divide-by-1 clock and an asynchronous clock mode when used 
as a divide-by-16 clock. This allows flexible baud rates for the various system clock rates, 

the divisor value being directly programmable. The UARTs are clocked by the internal sys- 
tem clock or an external clock signal on the TIN pins. 


14-6 


Note 


When using an external clock, TINO feeds UART1 and TIN1 
feeds UART2. The UARTs function independently of each other 
and can be clocked independently (external clock or system bus 
clock). 


The operation of the 16-bit timer does not affect the operation of 
the UART. However, if the TIN pin is used as a clocking source 
for either the Timer or UART, the timer will not be able to use the 
TIN pin for Timer capture. 
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14.3.3 Calculating Baud Rates 


14.3.3.1 SYSTEM BUS CLOCK . When the system bus clock is chosen as the clocking 
source for the UARTs, the system bus clock goes through a divide by 32 prescaler. This sig- 
nal then passes through the 16 bit divider of the concatenated UBG1 and UBG2 prescale 
registers. Assuming a 45 MHz system bus clock, baud rate calculations would be as follows: 


baud rate = (45 MHz) / [(32)*(16 bit divider)] 
9600 appx= (45 MHz) / [(82)*(146 decimal)] 
146 decimal = $01A0 hex therefore UBG1 = $01 and UBG2 = $A0 


See Figure 14-3 for details. 


14.3.3.2 EXTERNAL CLOCK. When an external clock pin is chosen as the clocking source 
for the UARTs, the external clock signal goes through a programmable divide by 16 or divide 
by 1 prescaler. This signal then passes through the 16 bit divider of the concatenated UBG1 
and UBG2 registers. 


baud rate = (external clock frequency) / [(16 or 1)*(16 bit divider)] 
See Figure 14-3 for details. 


14.3.4 Transmitter and Receiver Operating Modes 


The functional block diagram of the transmitter and receiver is shown in Figure 14-3. 
Included therein, are the command and operating registers. The following paragraphs con- 
tain descriptions for both of these functions in reference to this diagram. For detailed register 
information, refer to Section 14.4 Register Description and Programming. 


14.3.4.1 TRANSMITTER. The transmitter is enabled through its command register (UCR) 
located within the UART module. The UART module signals the CPU when it is ready to 
accept a character by setting the transmitter-ready bit (TxRDY) in the UART status register 
(USR). Functional timing information for the transmitter is shown in Figure 14-4. The trans- 
mitter converts parallel data from the CPU to a serial bit stream on TxD. It automatically 
sends a Start bit followed by the programmed number of data bits, an optional parity bit, and 
the programmed number of stop bits. The least significant bit is sent first. Data is shifted from 
the transmitter output on the falling edge of the clock source. 


Following transmission of the stop bits; if a new character is not available in the transmitter 
holding register, the TxD output remains high (‘mark' condition), and the transmitter empty 
bit (TxEMP) in the USR is set. Transmission resumes and the TXEMP bit is cleared when 
the CPU loads a new character into the transmitter buffer (UTB). If a disable command is 
sent to the transmitter, it continues operating until the character in the transmit shift register, 
if any, is completely sent out. If the transmitter is reset through a software command, oper- 
ation ceases immediately (refer to Section 14.4.1.5 Command Register (UCR)). The 
transmitter is re-enabled through the UCR to resume operation after a disable or software 
reset. 
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If the clear-to-send operation is enabled, the CTS signal must be asserted for the character 
to be transmitted. If CTS is negated in the middle of a transmission, the character in the shift 
register is transmitted, and TxD remains in the 'mark' state until CTS is asserted again. If the 
transmitter is forced to send a continuous low condition by issuing a send break command, 
the state of CTS is ignored by the transmitter. 
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BUFFER (URB) ” RECEIVER SHIFT REGISTER RXD 
(4REGISTERS) 






Figure 14-3. Transmitter and Receiver Functional Diagram 


14 | 

The transmitter can be programmed to automatically negate the request-to-send (RTS) out- 
put upon completion of a message transmission. If the transmitter is programmed to operate 
in this mode, RTS must be manually asserted before a message is transmitted. In applica- 
tions in which the transmitter is disabled after transmission is complete and RTS is appro- 
priately programmed, RTS is negated one bit time after the character in the shift register is 
completely transmitted. The transmitter must be manually re-enabled by reasserting RTS 
before the next message is to be sent. | 
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Figure 14-4. Transmitter Timing Diagram 
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14.3.4.2 RECEIVER. The receiver is enabled through its UCR located within the UART 
module. The functional timing information for the receiver is shown in Figure 14-5. The 
receiver looks for a high-to-low (mark-to-space) transition of the start biton RxD. When a 
transition is detected, the state of RxD is sampled each 16x clock for eight clocks, starting 
one-half clock after the transition (asynchronous operation) or at the next rising edge of the 
bit time clock (synchronous operation). If RxD is sampled high, the start bit is invalid, and 
the search for the valid start bit begins again. If RxD is still low, a valid start bit is assumed, 
and the receiver continues to sample the input at one-bit time intervals, at the theoretical 
center of the bit, until the proper number of data bits and parity, if any, is assembled and one 
stop bit is detected. Data on the RxD input is sampled on the rising edge of the programmed 
clock source. The least significant bit is received first. The data is then transferred to a 
receiver holding register, and the RxRDY bit in the USR is set. If the character length is less 
than eight bits, the most significant unused bits in the receiver holding register are cleared. 


After the stop bit is detected, the receiver immediately looks for the next start bit. However, 
if a non-zero character is received without a stop bit (framing error) and RxD remains low 
for one-half of the bit period after the stop bit is sampled, the receiver operates as if a new 
start bit is detected. The parity error (PE), framing error (FE), overrun error (OE), and 
received break (RB) conditions (if any) set error and break flags in the USR at the received 
character boundary and are valid only when the RxRDY bit in the USR is set. 


lf a break condition is detected (RxD is low for the entire character including the stop bit), a 
character of all zeros is loaded into the receiver holding register (RHR), and the RB and 
RxRDY bits in the USR are set. The RxD signal must return to a high condition for at least 
one-half bit time before a search for the next start bit begins. 


The receiver detects the beginning of a break in the middle of a character if the break per- 
sists through the next character time. When the break begins in the middle of a character, 
the receiver places the damaged character in the receiver first-in-first-out (FIFO) stack and 
sets the corresponding error conditions and RxRDY bit in the USR. Then, if the break per- 
sists until the next character time, the receiver places an all-zero character into the receiver 
FIFO and sets the corresponding RB and RxRDY bits in the USR. . 
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Figure 14-5. Receiver Timing Diagram 
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14.3.4.3 FIFO STACK. The FIFO stack is used in the UART's receiver buffer logic. The 
stack consists of three receiver holding registers. The receive buffer consists of the FIFO 
and a receiver shift register connected to the RxD (refer to Figure 14-3). Data is assembled 
in the receiver shift register and loaded into the top empty receiver holding register position 
of the FIFO. Thus, data flowing from the receiver to the CPU is quadruple buffered. 


In addition to the data byte, three status bits, PE (Parity Error), FE (Framing Error), and RB 
(Received Break), are appended to each data character in the FIFO; OE (Overrun Error) is 
not appended. By programming the ERR bit in the channel's mode register (UMR1), status 
is provided in character or block modes. 


The RxRDY bit in the USR is set whenever one or more characters are available to be read 
by the CPU. A read of the receiver buffer produces an output of data from the top of the FIFO 
stack. After the read cycle, the data at the top of the FIFO stack and its associated status 
bits are 'popped', and new data can be added at the bottom of the stack by the receiver shift 
register. The FIFO-full status bit (FFULL) is set if all three stack positions are filled with data. 
Either the RxRDY or FFULL bit can be selected to cause an interrupt. 


In the character mode, status provided in the USR is given on a character-by-character 
basis and thus applies only to the character at the top of the FIFO. In the block mode, the 
status provided in the USR is the logical OR of all characters coming to the top of the FIFO 
stack since the last reset error command. A continuous logical OR function of the corre- 
sponding status bits is produced in the USR as each character reaches the top of the FIFO 
stack. The block mode is useful in applications where the software overhead of checking 
each character's error cannot be tolerated. In this mode, entire messages are received, and 
only one data integrity check is performed at the end of the message. This mode allows a 
data-reception speed advantage, but does have a disadvantage since each character is not 
individually checked for error conditions by software. If an error occurs within the message, 
the error is not recognized until the final check is performed, and no indication exists as to 
which character in the message is at fault. 


In either mode, reading the USR does not affect the FIFO. The FIFO is ‘popped’ only when 
the receive buffer is read. The USR should be read prior to reading the receive buffer. If all 
three of the FIFO's receiver holding registers are full when a new character is received, the 
new character is held in the receiver shift register until a FIFO position is available. If an addi- 
tional character is received during this state, the contents of the FIFO are not affected. How- 
ever, the character previously in the receiver shift register is lost, and the OE (Overflow 
Error) bit in the USR is set when the receiver detects the start bit of the new overrunning 
character. | 


To support control flow capability, the receiver can be programmed to automatically negate 
and assert RTS. When in this mode, RTS is automatically negated by the receiver when a 
valid start bit is detected and the FIFO stack is full. When a FIFO position becomes avail- 
able, RTS is asserted by the receiver. Using this mode of operation, overrun errors are pre- 
vented by connecting the RTS to the CTS input of the transmitting device. 
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NOTE 


In order to use the RTS or CTS signals, the port B control register must be set up to enable 
the corresponding I/O pins for these functions. If the FIFO stack contains characters and the 
receiver is disabled, the characters in the FIFO can still be read by the CPU. If the receiver 
is reset, the FIFO stack and all receiver status bits, corresponding output ports, and interrupt 
request are reset. No additional characters are received until the receiver is re-enabled. 


14.3.5 Looping Modes 


The UART can be configured to operate in various looping modes as shown in Figure 14-6. 
These modes are useful for local and remote system diagnostic functions. The modes are 
described in the following paragraphs with further information available in Section 14.4 
Register Description and Programming. 


The UART's transmitter and receiver should both be disabled when switching between 
modes. The selected mode is activated immediately upon mode selection, regardless of 
whether a character is being received or transmitted. 


14.3.5.1 AUTOMATIC ECHO MODE. In the automatic echo mode, the UART automatically 
retransmits the received data on a bit-by-bit basis. The local CPU-to-receiver communica- 
tion continues normally, but the CPU-to-transmitter link is disabled. While in this mode, 
received data is clocked on the receiver clock and retransmitted on TxD. The receiver must 
be enabled, but the transmitter need not be enabled. 


Since the transmitter is not active, the TxXEMP and TxRDY bits in USR are inactive, and data 
is transmitted as it is received. Received parity is checked, but not recalculated for transmis- 
sion. Character framing is also checked, but stop bits are transmitted as received. A 
received break is echoed as received until the next valid start bit is detected. 


14.3.5.2 LOCAL LOOPBACK MODE. TxD is internally connected to RxD in the local loop- 
back mode. This is useful for testing the operation of a local UART module channel by send- 
ing data to the transmitter and checking data assembled by the receiver. In this manner, 
correct channel operations can be assured. Also, both transmitter and CPU-to-receiver 
communications continue normally in this mode. While in this mode, the RxD input data is 
ignored, the TxD is held marking, and the receiver is clocked by the transmitter clock. The 
transmitter must be enabled, but the receiver need not be enabled. 


14.3.5.3 REMOTE LOOPBACK MODE. In this mode, the channel automatically transmits 
received data on the TxD output on a bit-by-bit basis. The local CPU-to-transmitter link is 
disabled. This mode is useful in testing receiver and transmitter operation of a remote chan- 
nel. While in this mode, the receiver clock is used for the transmitter. 


Since the receiver is not active, received data cannot be read by the CPU, and the error sta- 
tus conditions are inactive. Received parity is not checked and is not recalculated for trans- 
mission. Stop bits are transmitted as received. A received break is echoed as received until 
the next valid start bit is detected. 
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Figure 14-6. Looping Modes Functional Diagram 
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14.3.6 Multidrop Mode 


The UART can be programmed to operate in a wakeup mode for multidrop or multiprocessor 
applications. Functional timing information for the multidrop mode is shown in Figure 14-7. 
The mode is selected by setting bits 3 and 4 in mode register 1 (UMR1). This mode of oper- 
ation allows the master station to be connected to several slave stations (maximum of 256). 
In this mode, the master transmits an address character followed by a block of data charac- 
ters targeted for one of the slave stations. The slave stations have their channel receivers 
disabled. However, they continuously monitor the data stream sent out by the master sta- 
tion. When an address character is sent by the master, the slave receiver channel notifies 
its respective CPU by setting the RxRDY bit in the USR and generating an interrupt (if pro- 
grammed to do so). Each slave station CPU then compares the received address to its sta- 
tion address and enables its receiver if it wishes to receive the subsequent data characters 
or block of data from the master station. Slave stations not addressed continue to monitor 
the data stream for the next address character. Data fields in the data stream are separated 
by an address character. After a slave receives a block of data, the slave station's CPU dis- 
ables the receiver and initiates the process again. 


A transmitted character from the master station consists of a start bit, a programmed number 
of data bits, an address/data (A/D) bit flag, and a programmed number of stop bits. The A/ 
D bit identifies the type of character being transmitted to the slave station. The character is 
interpreted as an address character if the A/D bit is set or as a data character if the A/D bit 
is cleared. The polarity of the A/D bit is selected by programming bit 2 of UMR1. UMR1 
should be programmed before enabling the transmitter and loading the corresponding data 
bits into the transmit buffer. 


In multidrop mode, the receiver continuously monitors the received data stream, regardless 
of whether it is enabled or disabled. If the receiver is disabled, it sets the RxRDY bit and 
loads the character into the receiver holding register FIFO stack provided the received A/D 
bit is a one (address tag). The character is discarded if the received A/D bit is a zero (data 
tag). If the receiver is enabled, all received characters are transferred to the CPU via the 
receiver holding register stack during read operations. 


In either case, the data bits are loaded into the data portion of the stack while the A/D bit is 
loaded into the status portion of the stack normally used for a parity error (USR bit 5). Fram- 
ing error, overrun error, and break detection operate normally. The A/D bit takes the place 
of the parity bit; therefore, parity is neither calculated nor checked. Messages in this mode 
may still contain error detection and correction information. One way to provide error detec- 
tion, if 8-bit characters are not required, is to use software to calculate parity and append it 
to the 5-, 6-, or 7-bit character. 
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Figure 14-7. Multidrop Mode Timing Diagram 
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14.3.7 Bus Operation 


This section describes the operation of the bus during read, write, and interrupt acknowl- 
edge cycles to the UART module. All UART module registers must be accessed as bytes. 


14.3.7.1 READ CYCLES. The UART module responds to reads with byte data on D7—DO. 
Reserved registers return logic zero during reads. 


14.3.7.2 WRITE CYCLES. The UART module accepts write data on D7—DO. Write cycles to 
read-only registers and reserved registers complete in a normal manner without exception 
processing; however, the data is ignored. 


NOTE 


The UART module is accessed by the CPU with zero wait states, 
as the system bus clock is used for the UART module. 


14.3.7.3 INTERRUPT ACKNOWLEDGE CYCLES. The UART module is capable of arbi- 
trating for interrupt servicing and supplying the interrupt vector when it has successfully won 
arbitration. The vector number must be provided if interrupt servicing is necessary; thus, the 
interrupt vector register (UIVR) must be initialized. If the UIVR is not initialized, a spurious 
interrupt exception is taken if interrupts are generated. This works in conjunction with the 
interrupt controller, which allows a programmable IPL for the interrupt. 


14.4 REGISTER DESCRIPTION AND PROGRAMMING 


This section contains a detailed description of each register and its specific function as well 
as flowcharts of basic UART module programming. 


14.4.1 Register Description 


The operation of the UART module is controlled by writing control bytes into the appropriate 
registers. A list of UART module registers and their associated addresses is shown in Table 
14-1. 


NOTE 


All UART module registers are only accessible as bytes. The 
contents of the mode registers (UMR1 and UMR2), clock-select 
register (UCSR), and the auxiliary control register (UACR) bit 7 
should only be changed after the receiver/transmitter is issued a 
software RESET command—i.e., channel operation must be 
disabled. Care should also be taken if the register contents are 
changed during receiver/transmitter operations, as undesirable 
results may be produced. | 


In the registers discussed in the following pages, the numbers above the register description 
represent the bit position in the register. The register description contains the mnemonic for 
the bit. The values shown below the register description are the values of those register bits 
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after a hardware reset. A value of U indicates that the bit value is unaffected by reset. The 
read/write status is shown in the last line. 


Table 14-1. UVART Module Programming Model 


UART1 UART2 REGISTER READ (R/W = 1) REGISTER WRITE (R/W=0) | 









MBAR+$1CO | MBAR+$200 MODE REGISTER (UMR1, UMR2) MODE REGISTER (UMR1, UMR2) 
MBAR+$1C4 | MBAR+$204 STATUS REGISTER (USR) CLOCK-SELECT REGISTER (UCSR) 


MBAR+$1C8 | MBAR+$208 DO NOT ACCEsSs! COMMAND REGISTER (UCR) 
MBAR+$1CC | MBAR+$20C RECEIVER BUFFER (URB) TRANSMITTER BUFFER (UTB) 


MBAR+$1D0 | MBAR+$210 | INPUT PORT TLNEE REGISTER | AUXILIARY CONTROL REGISTER (UACR) 


MBAR+$1D4 | MBAR+$214 jINTERRUPT STATUS REGISTER (UISR)| INTERRUPT MASK REGISTER (UIMR) 
MBAR+$1D8 | MBAR+$218 BAUD RATE GENERATOR PRESCALE MSB (UBG1) 
MBAR+$1DC | MBAR+$21C BAUD RATE GENERATOR PRESCALE LSB (UBG2) 


ae ae 


| MBAR+$218 | 


NOTES 

1. This address is used for factory testing and should not be read. Reading this location results in undesired effects and 
possible incorrect transmission or reception of characters. Register contents may also be changed. 

2. Address-triggered commands. 

















14.4.1.1 MODE REGISTER 1 (UMR1). UMR1 controls some of the UART module configu- 
ration. This register can be read or written at any time. It is accessed when the mode register 
pointer points to UMR1. The pointer is set to UMR1 by RESET or by a set pointer command 
using the MISC[2:1] bits in the UCR control register. The pointer will point to the UMR1 reg- 
ister after reading or writing UMR1, the pointer points to UMR2. 


UMR1 MBAR + $1C0, $200 
7 6 5 4 3 2 1 0 
aRTS[RNRG] ERA | PM | PMO] PT | B/C | BCO 

T 
0 0 0 0 0 0 0 0 
Read/Write Supervisor or User 
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(RxRTS)—Receiver Request-to-Send 
1 = Upon receipt of a valid start bit, RTS is negated if the UART's FIFO is full. RTS is 
reasserted when the FIFO has an empty position available. 

O= The receiver has no effect on RTS. 
This feature can be used for flow control to prevent overrun in the receiver by using the 
RTS output to control the CTS input of the transmitting device. If both the receiver and 
transmitter are programmed for RTS control, RTS control is disabled for both since this 
configuration is incorrect. See Section 14.4.1.2 Mode Register 2 (UMR2) for information 
on programming the transmitter RTS control. 


(RxIRQ) — Receiver Interrupt Select 


1 = FFULL is the source that generates IRQ. 
O = RXxXRDY is the source that generates IRQ. 


(ERR) — Error Mode 
This bit controls the meaning of the three FIFO status bits (RB, FE, and PE) in the USR. 


1 = Block mode—The values in the channel USR are the accumulation (i.e., the logical 
OR) of the status for all characters coming to the top of the FIFO since the last reset 
error status command for the channel was issued. Refer to Section 14.4.1.5 Com- 
mand Register (UCR) for more information on UART module commands. 

O = Character mode—The values in the channel USR reflect the status of the character 
at the top of the FIFO. 


NOTE 
ERR = 0 must be used to get the correct A/D flag information 
when in multidrop mode. 


(PM1—PMO) — Parity Mode 


These bits encode the type of parity used for the channel (see Table 14-2). The parity bit 
is added to the transmitted character, and the receiver performs a parity check on incom- 
ing data. These bits can alternatively select multidrop mode for the channel. 


(PT) — Parity Type 
This bit selects the parity type if parity is programmed by the parity mode bits, and if mul- 
tidrop mode is selected, it configures the transmitter for data character transmission or ad- 


MOTOROLA MCF5307 User’s Manual 14-19 


DUART 


dress character transmission. Table 14-2 lists the parity mode and type or the multidrop 
mode for each combination of the parity mode and the parity type bits. : 


Table 14-2. PMx and PT Control Bits 









0 | 0 | winPariy | 0 | even Party 
of o | winPay [+ | Oda Party 
[0 [4 | Force Party [0 | tow Pariy 
(oreo Pasty [4 | High Party 
Cfo | NoParty [x | NoParty 
7 To 





Multidrop Mode Data Character 
Multidrop Mode Address Character 


(B/C1—B/CO) — Bits per Character 
These bits select the number of data bits per character to be transmitted. The character 
length listed in Table 14-3 does not include start, parity, or stop bits. | 





Table 14-3. B/Cx Control Bits 


| a oe Five Bits 
oft [sees 
ae sevens 


14.4.1.2 MODE REGISTER 2 (UMR2). UMR2 controls some of the UART module configu- 
ration. It is accessed when the mode register pointer points to UMR2, which occurs after any 
access to UMR1. Accesses to UMR2 do not change the pointer. 


















UMR2 MBAR + $1C0,$200 
7 6 5 4 3 2 1 0 
} 
oe 
0 0 0 0 Oo 860 0 0 
Read/Write Supervisor or User 
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(CM1—CMO) — Channel Mode 


These bits select a channel mode as listed in Table 14-4. See Section 14.3.5 Looping 
Modes for more information on the individual modes. 


Table 14-4. CMx Control Bits 


pcm | cMo [| MODE 


Normal 


Automatic Echo 
Ne Ona Local Loopback 
Remote Loopback 


(TxRTS) — Transmitter Ready-to-Send 
This bit controls the negation of the RTS signal. 


1 = In applications where the transmitter is disabled after transmission is complete, 
setting this bit causes the particular OP bit to be cleared automatically one bit time 
after the characters, if any, in the channel transmit shift register and the transmitter 
holding register are completely transmitted, including the programmed number of 
stop bits. This feature is used to automatically terminate transmission of a mes- 
sage. If both the receiver and the transmitter in the same channel are programmed 
for RTS control, RTS control is disabled for both since this is an incorrect configu- 
ration. 

O = The transmitter has no effect on RTS. 

















Lae 
Eos 


(TxCTS) — Transmitter Clear-to-Send 


1 = Enables clear-to-send operation. The transmitter checks the state of the CTS input 
each time it is ready to send a character. If CTS is asserted, the character is trans- 
mitted. If CTS is negated, the channel TxD remains in the high state, and the trans- 
mission is delayed until CTS is asserted. Changes in CTS while a character is 
being transmitted do not affect transmission of that character. If both TxCTS and 
TxRTS are enabled, TxCTS controls the operation of the transmitter. 

0 = The CTS has no effect on the transmitter. 


(SB3-SB0) — Stop-Bit Length Control 


These bits select the length of the stop bit appended to the transmitted character as listed 
in Table 14-5. Stop-bit lengths of nine-sixteenth to two bits, in increments of one-sixteenth 
bit, are programmable for character lengths of six, seven, and eight bits. For a character 
length of five bits, one and one-sixteenth to two bits are programmable in increments of 
one-sixteenth bit. In all cases, the receiver only checks for a high condition at the center 
of the first stop-bit position—i.e., one bit time after the last data bit or after the parity bit, if 
parity is enabled. 
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If an external 1x clock is used for the transmitter, UMR2 bit 3 = 0 selects one stop bit, and 
UMRz2 bit 3 = 1 selects two stop bits for transmission. 


Table 14-5. SBx Control Bits 


[ses | s62 | S81 | S80 [LENGTH6-OBIS] LENGTHS BITS | 

ro fo yo fo | ose | tos 
eo oes rs 
a 
190 s00 






















14.4.1.3 STATUS REGISTER (USR). The USR indicates the status of the characters in the 
FIFO and the status of the transmitter and receiver. 





ae MBAR + $7 see oe 
Pe [De | [lee 
— 

0 0 0 0 0 0 0 0 
Read Only Supervisor or User 


(RB) — Received Break 


1= 


14-22 


An all-zero character of the programmed length has been received without a stop 
bit. The RB bit is only valid when the RxRDY bit is set. Only a single FIFO position 
is occupied when a break is received. Further entries to the FIFO are inhibited until 
RxD returns to the high state for at least one-half bit time, which is equal to two suc- 
cessive edges of the internal or external 1x clock or 16 successive edges of the 
external 16x clock. 

The received break circuit detects breaks that originate in the middle of a received 
character. However, if a break begins in the middle of a character, it must persist 
until the end of the next detected character time. 

No break has been received. 
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(FE) — Framing Error 
~1= Astop bit was not detected when the corresponding data character in the FIFO was 
received. The stop-bit check is made in the middle of the first stop-bit position. The 
bit is valid only when the RxRDY bit is set. 
O = No framing error has occurred. 


(PE) — Parity Error 
1 = When the with parity or force parity mode is programmed in the UMR1, the corre- 
sponding character in the FIFO was received with incorrect parity. When the mul- 
tidrop mode is programmed, this bit stores the received A/D bit. This bit is valid only 
when the RxRDY bit is set. 
O= No parity error has occurred. 


(OE) — Overrun Error 

1 = One or more characters in the received data stream have been lost. This bit is set 
upon receipt of a new character when the FIFO is full and a character is already in 
the shift register waiting for an empty FIFO position. When this occurs, the charac- 
ter in the receiver shift register and its break detect, framing error status, and parity 
error, if any, are lost. This bit is cleared by the reset error status command in the 
UCR. 

O= No overrun has occurred. 


(TxXEMP) — Transmitter Empty 

1 = The transmitter has underrun (both the transmitter holding register and transmitter 
shift registers are empty). This bit is set after transmission of the last stop bit of a 
character if there are no characters in the transmitter holding register awaiting 
transmission. 

O= The transmitter buffer is not empty. Either a character is currently being shifted out, 
or the transmitter is disabled. The transmitter is enabled/disabled by programming 
the TCx bits in the UCR. 


(TxRDY) — Transmitter Ready 
1 = The transmitter holding register is empty and ready to be loaded with a character. 
This bit is set when the character is transferred to the transmitter shift register. This 
bit is also set when the transmitter is first enabled. Characters loaded into the trans- 
mitter holding register while the transmitter is disabled are not transmitted. 
O= The transmitter holding register was loaded by the CPU, or the transmitter is dis- 
abled. 


(FFULL) — FIFO Full 


1 = Acharacter has been received and is waiting in the receiver buffer FIFO. 
0 = The FIFO is not full, but may contain up to two unread characters. 
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(RxRDY) — Receiver Ready 


~1= One or more characters has been received and is walting in the receiver ue 
— FIFO. 
O = The CPU has read the receiver buffer, and no characters remain in the FIFO after 
this read. 


14.4.1.4 CLOCK-SELECT REGISTER (UCSR). The UCSR selects the system bus clock or 
a divide by 16 or 1 external clock. The upper 4 bits set the receiver and the lower 4 bits set 
the transmitter clock source. To use the system bus clock for both the transmitter and 
receiver, the UCSR should be programmed with $DD. The transmitter and receiver can be 
programmed with different clock sources. 


lem MBAR + as ve 
RESE 

a 

0 0 0 0 0 0 0 0 
Write Only Supervisor or User 


(RCS3—RCSO) — Receiver Clock Select 


These bits select the clock source for the receiver channel. Table 14-6 details the register 
bits necessary for each mode. 


| Ladera RCS[3:0] Control Bits 


| Lae ee ee See 
| peers ee ae 
Poa f tf at ft [ xtextak 


(TCS3-TCSO) — Transmitter Clock Select 


These bits select the clock source for the transmitter channel. Table 14- 7 details the reg- 
ister bits necessary for each mode 


Table 14-7. TCS[3:0] Control Bits 


Pa pt) 0] + | Twer 
ae 
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14.4.1.5 COMMAND REGISTER (UCR). The UCR is used to supply commands to the 
UART. Multiple commands can be specified in a single write to the UCR if the commands 
are not conflicting — e.g., reset transmitter and enable transmitter commands cannot be 
specified in a single command. 


UCR MBAR + mae — 
[ser scr asco] Tor [ Tew [Ror [Aco™ 
tees 

: 0 0 0 0 0 0 0 
Write Only Supervisor or User 


(MISC2—MISCO) — Miscellaneous Commands 
These bits select a single command as listed in Table 14-8. 


Table 14-8. MISC[2:0] Control Bits 


rc wisea [wiser | wisco [COMMAND 
po fF of No Command 
[0 [0 [4 [Reset Woe Resistor Poitor 
oa ease Receiver 
ose Transmiter 
ao est ror Satis 
ee a 
ss 
a 
















Reset Break-Change Interrupt 
Start Break 
Stop Break 


Reset Mode Register Pointer 


The reset mode register pointer command causes the mode register pointer to point to 
UMR1. 


Reset Receiver 
With this command, the receiver is immediately disabled, the FFULL and RxRDY bits in 
the USR are cleared, and the receiver FIFO pointer is reinitialized. All other registers are 
unaltered. This command should be used in lieu of the receiver disable command when- 
ever the receiver configuration is changed because it places the receiver in a known state. 


Reset Transmitter 


The reset transmitter command resets the transmitter by, immediately disabling the trans- 
mitter, and clearing the TxXEMP and TxRDY bits in the USR. All other registers are unal- 
tered. This command should be used in lieu of the transmitter disable command whenever 
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the transmitter configuration is changed because it places the transmitter in a known 
state. | 


Reset Error Status 


The reset error status command clears the RB, FE, PE, and OE bits (in the USR). This 
command is also used in the block mode to clear all error bits after a data block is re- 
ceived. 


Reset Break 


Change Interrupt—The reset break-change interrupt command clears the delta break 
(DBx) bits in the UISR. 


Start Break 


The start break command forces TxD low. If the transmitter is empty, the start of the break 
conditions can be delayed up to one bit time. If the transmitter is active, the break begins 
when transmission of the character is complete. If a character is in the transmitter shift 
register, the start of the break is delayed until the character is transmitted. If the transmit- 
ter holding register has a character, that character is transmitted after the break. The 
transmitter must be enabled for this command to be accepted. The state of the CTS input 
is ignored for this command. 
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Stop Break 


The stop break command causes TxD to go high (mark) within two bit times. Characters 
stored in the transmitter buffer, if any, are transmitted. 


(TC1—TCO) — Transmitter Commands 
These bits select a single command as listed in Table 14-9. 


Table 14-9. TC[1:0] Control Bits 


Crer_[ reo | comManD 
0 | 0 | Notion Taken 
[0 |_| Erbe Transmiter 
[4 [0 | Disable Transmitor — 
















No Action Taken 


The no action taken command causes the transmitter to stay in its current mode. If the 
transmitter is enabled, it remains enabled; if disabled, it remains disabled. 


Transmitter Enable 


The transmitter enable command enables operation of the channel's transmitter. The Tx- 
EMP and TxRDY bits in the USR are also set. If the transmitter is already enabled, this 
command has no effect. 


Transmitter Disable 


The transmitter disable command terminates transmitter operation and clears the TxEMP 
and TxRDY bits in the USR. However, if a character is being transmitted when the trans- 
mitter is disabled, the transmission of the character is completed before the transmitter 
becomes inactive. If the transmitter is already disabled, this command has no effect. 


Do Not Use 
Do not use this bit combination because the result is indeterminate. 
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(RC1—RCO) — Receiver Commands 
These bits select a single command as listed in Table 14-10. 
Table 14-10. RCx Control Bits 


CRet_[ co [COMMAND 


Disable Receiver 


Do Not Use 


ee ee 
| Oo | 1 | EnableReceiver | 
ne 
i 





No Action Taken 


The no action taken command causes the receiver to stay in its current mode. If the re- 
ceiver is enabled, it remains enabled; if disabled, it remains disabled. 


Receiver Enable 


If the UART module is not in multidrop mode, The receiver enable command enables op- 
eration of the channel's receiver. This command also forces the receiver into the search- 
for-start-bit state. If the receiver is already enabled, this command has no effect. 


Receiver Disable 


The receiver disable command disables the receiver immediately. Any character being re- 
ceived is lost. The command has no effect on the receiver status bits or any other control 
register. If the UART module is programmed to operate in the local loopback mode or mul- 
tidrop mode, the receiver operates even though this command is selected. If the receiver 
is already disabled, this command has no effect. 


Do Not Use 
Do not use this bit combination because the result is indeterminate. 


14.4.1.6 RECEIVER BUFFER (URB). The receiver buffer contains three receiver holding 
registers and a serial shift register. The RxD pin is connected to the serial shift register. The 
holding registers act as a FIFO. The CPU reads from the top of the stack while the receiver 
shifts and updates from the bottom of the stack when the shift register has been filled (see 
Figure 14-3). 


URB MBAR + $10C,$20C 
7 6 5 4 3 2 1 0 
[mer _[ ee | Ras | Ree | ABS | Ree [Ret | REO | 

RESET: 
0 0 0 0 0 0 0 0 
Read Only Supervisor or User 


(RB7—RBO) — These bits contain the character in the receiver buffer. 
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14.4.1.7 TRANSMITTER BUFFER (UTB). The transmitter buffer consists of two registers, 
the transmitter holding register and the transmitter shift register (see Figure 14-2). The hold- 
ing register accepts characters from the bus master if the TxRDY bit in the channel's USR 
is set. A write to the transmitter buffer clears the TxRDY bit, inhibiting any more characters 
until the shift register is ready to accept more data. When the shift register is empty, it checks 
to see if the holding register has a valid character to be sent (TxRDY bit cleared). If there is 
a valid character, the shift register loads the character and reasserts the TxRDY bit in the 
USR. Writes to the transmitter buffer when the channel's USR TxRDY bit is clear and when 
the transmitter is disabled have no effect on the transmitter buffer. 


UTB MBAR + $1CC,$20C 
¢ 6 5 4 3 2 1 0 
RESET: 
0 0 0 0 0 0 0 0 
Write Only Supervisor or User 


(TB7—TBO) — These bits contain the character in the transmitter buffer. 


14.4.1.8 INPUT PORT CHANGE REGISTER (UIPCR). The UIPCR shows the current state 
and the change-of-state for the CTS pin. 


UIPCR MBAR + $1D0,$210 
7 6 5 4 3 2 1 0 
po [oo | o feos] + | it [4 | ors | 
RESET: 
0 0 0 0 0 1 1 cTs 
Read Only Supervisor or User 


Bits 7, 6, 5, 3, 2, 1 — Reserved by Motorola. 


(COS) — Change-of-State 
1 = Achange-of-state (high-to-low or low-to-high transition), lasting longer than 25—50 
us has occurred at the corresponding IPx input. When these bits are set, the VACR 
can be programmed to generate an interrupt to the CPU. 
0 = No change-of-state has occurred since the last time the CPU read the UIPCR. A 
read of the UIPCR also clears the UISR COS bit. 


(CTS) — Current State 
Starting two serial clock periods after reset, the CTS bit reflects the state of the CTS pin. 
lf the CTS pin is detected as asserted at that time, the COS bit is set, which initiates an 
interrupt if the IEC bit of the UACR register is enabled. 
1 = The current state of the CTS input is logic one. 
0 = The current state of the CTS input is logic zero. 
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14.4.1.9 AUXILIARY CONTROL REGISTER (UACR). The UACR selects which baud rate 
is used and controls the handshake of the transmitter/receiver. 


UACR MBAR + $1D0,$210 
7 6 5 4 3 2 1 0 
Mest Bio Wed i ad val eat eo a 
RESET: 
Write Only Supervisor or User 


(BRG) — Baud Rate Generator Set Select 


1 = Set 2 of the available baud rates is selected. 
0= Set 1 of the available baud rates is selected. Refer to Section 14.4.1.4 Clock-se- 
lect Register (UCSR) for more information on the baud rates. 


(CTMS2—CTMSO) — Timer Mode and Source Select 
Table 14-11 shows the timer mode and source select bit fields. 


Table 14-11. Timer Mode and Source Select Bits 


CLOCK SOURCE SELECT 
CTMS2 | CTMS1 CTMSO | MODE COMMAND COMMAND 


NOTE: Other values are invalid and should not be used. 


(IEC) — Input Enable Control 


1 = UISR bit 7 is set and an interrupt is generated when the COS bit in the UIPCR is 
set by an external transition on the CTS input (if bit 7 of the interrupt mask register 
(UIMR) is set to enable interrupts). 

O= Setting the corresponding bit in the UIPCR has no effect on UISR bit 7. 


14.4.1.10 INTERRUPT STATUS REGISTER (UISR). The UISR provides status for all 
potential interrupt sources. The contents of this register are masked by the UIMR. If a flag 
in the UISR is set and the corresponding bit in UIMR is also set, the internal interrupt output 
is asserted. If the corresponding bit in the UIMR is cleared, the state of the bit in the UISR 
has no effect on the output. 
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NOTE 


The UIMR does not mask reading of the UISR. True status is 
provided regardless of the contents of UIMR. The contents of 
UISR are cleared when the UART module is reset. 


UISR MBAR + $1D4,$214 

7 6 5 4 3 2 1 0 
eos | — [| = [= [ = | 08 [apy [roy 
RESET: 

0 0 0 0 0 0 0 0 
Read Only Supervisor or User 


(COS) — Change-of-State 
1 = Achange-of-state has occurred at the CTS input and has been selected to cause 


an interrupt by programming bit 0 of the UACR. 
0= COS bit in the UIPCR is not selected. 


(DB) — Delta Break 
1 = The receiver has detected the beginning or end of a received break. 
0 = No new break-change condition to report. Refer to Section 14.4.1.5 Command 
Register (UCR) for more information on the reset break-change interrupt com- 
mand. 


(RxRDY) — Receiver Ready or FIFO Full 


The function of this bit is programmed by UMR’1 bit 6. It is a duplicate of either the 
FFULL or RxRDY bit of USR. 


(TxRDY) — Transmitter Ready 
This bit is the duplication of the TxRDY bit in USR. 
1 = The transmitter holding register is empty and ready to be loaded with a character. 
O= The transmitter holding register was loaded by the CPU, or the transmitter is dis- 
abled. Characters loaded into the transmitter holding register when TxRDY=0 are 
not transmitted. 





14.4.1.11 INTERRUPT MASK REGISTER (UIMR). The UIMR selects the corresponding 
bits in the UISR that cause an interrupt. If one of the bits in the UISR is set and the corre- 
sponding bit in the UIMR is also set, the internal interrupt output is asserted. If the corre- 


MOTOROLA MCF5307 User’s Manual 14-31 





DUART 


UIMR MBAR + $1D4,$214 

7 6 5 4 3 2 1 0 
Deos [— [ — [= [ — | © [rrun[naoy’ 
RESET: 

0 0 0 0 0 0 0 0 
Write Only Supervisor or User 


(COS) — Change-of-State 
1 = Enable interrupt 
0 = Disable interrupt 


(DB) — Delta Break 


1 = Enable interrupt 
0 = Disable interrupt 


(FFULL) — FIFO Full 


1 = Enable interrupt 
0 = Disable interrupt 


(TxRDY) — Transmitter Ready 
1 = Enable interrupt 
0 = Disable interrupt 


14.4.1.12 TIMER UPPER PRELOAD REGISTER (UBG1). This register holds the eight 
most significant bits of the preload value. This value divides the system bus clock to the 
UART in order to provide a given baud rate. 


14.4.1.13 TIMER UPPER PRELOAD REGISTER (UBG2). This register holds the eight 
least significant bits of the preload value. This value divides the system bus clock to the 
UART in order to provide a given baud rate 


NOTE 
The minimum value that can be loaded on the concatenation of 


UBG1 with UBG2 is $0002. Both (UBG1) and (UBG2) are write 
_ only and cannot be read by the CPU. 


14-32 MCF5307 User’s Manual MOTOROLA 


DUART 


14.4.1.14 INTERRUPT VECTOR REGISTER (UIVR). The UIVR contains the 8-bit vector 
number of the internal interrupt. 





UIVR MBAR + $1F0,$230 
7 6 5 4 3 2 1 0 
RESET: 
0 0 0 0 1 1 1 1 
Read/Write Supervisor or User 


(IVR7—-IVRO) — Interrupt Vector Bits 


This 8-bit number indicates the offset from the base of the vector table where the address 
of the exception handler for the specified interrupt is located. The UIVR is reset to $0F, 
which indicates an uninitialized interrupt condition. 


14.4.1.15 INPUT PORT REGISTER (UIP). The UIP register shows the current state of the 
CTS input. 


UIP MBAR + $1F4,$234 


7 6 5 4 3 2 1 0 
oe Ra Ee eS ee ee 
RESET: 

1 1 1 1 1 1 1 1 


Read Only Supervisor or User 


(CTS) — Current State 


1 = The current state of the CTS input is logic one. 
O= The current state of the CTS input is logic zero. 


The information contained in this bit is latched and reflects the state of the input pin at the 
time that the UIP is read. 


NOTE 
This bit has the same function and value as the UIPCR bit 0. 
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14.4.1.16 OUTPUT PORT DATA REGISTERS (UOP1, UOPO). The RTS output is set by 
performing a bit set command (writing to UOP1) and is cleared by performing a bit reset 
command (writing to UOPO). 


Bit Set 
UOP1 MBAR + $1F8,$238 


7 6 5 4 3 2 1 0 
ee ee ee ee ee 
RESET: 
—. “ge 0 


Write Only Supervisor or User 


(RTS) — Output Port Parallel Output 
1 = Awrite cycle to the OP bit set command address sets all OP bits corresponding to 


one bits on the data bus. 
0= These bits are not affected by writing a zero to this address. 


NOTE 


The output port bits are inverted at the pins, so the RTS set bit 
provides an asserted RTS pin. 


Bit Reset 
UOPO MBAR + $1FC,$23C 
7 6 5 4 3 2 1 0 
a ee ee ee ee ee 
RESET: 


Write Only Supervisor or User 


(RTS) — Output Port Parallel Output 
1 = Awrite cycle to the OP bit reset command address clears all OP bits corresponding 


to one bits on the data bus. 
O= These bits are not affected by writing a zero to this address. 


14.4.2 Programming 


The basic interface software flowchart required for operation of the UART module is shown 
in Figure 14-8. The routines are divided into three categories: 


e UART Module Initialization 
e |/O Driver 
e Interrupt Handling 
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14.4.2.1 VART MODULE INITIALIZATION. The UART module initialization routines con- 
sist of SINIT and CHCHK. SINIT is called at system initialization time to check UART oper- 
ation. Before SINIT is called, the calling routine allocates two words on the system stack. 
Upon return to the calling routine, SINIT passes information on the system stack to reflect 
the status of the UART. If SINIT finds no errors, the receiver and transmitter are enabled. 
The CHCHK routine performs the actual checks as called from the SINIT routine. When 
called, SINIT places the UART in the local loopback mode and checks for the following er- 
rors: 


e Transmitter Never Ready 
e Receiver Never Ready 
e Parity Error 
e Incorrect Character Received 
14.4.2.2 I/O DRIVER EXAMPLE. The |/O driver routines consist of INCH and OUTCH. 


INCH is the terminal input character routine and gets a character from the receiver. OUTCH 
is used to send a character to the transmitter. 


14.4.2.3 INTERRUPT HANDLING. The interrupt handling routine consists of SIRQ, which 
is executed after the UART module generates an interrupt caused by a change-in-break 
(beginning of a break). SIRQ then clears the interrupt source, waits for the next change-in- 
break interrupt (end of break), clears the interrupt source again, then returns from exception 
processing to the system monitor. 


14.5 UART MODULE INITIALIZATION SEQUENCE 
The following steps are required to properly initialize the UART module. 


NOTE 
The UART module registers can be accessed by word or byte 
operations, but only the data byte D7—D0 is valid. 
Command Register (UCR) 
e Reset the receiver and transmitter. 
e Reset the mode pointer (MISC[2:0] = “001”) 
Interrupt Vector Register (UIVR) 
e Program the vector number for a UART Module interrupt. 
Interrupt Mask Register (UIMR) 
e Enable the preferred interrupt sources. 
Auxiliary Control Register (UACR) 
e Select baud rate set (BRG bit). 
e Initialize the Input Enable Control (IEC bit). 
* Select timer mode and clock source if necessary. 
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Clock Select Register (UCSR) 
e Select the receiver and transmitter clock. Use timer as source if required. 
Mode Register 1 (UMR1) 
e If preferred, program operation of receiver ready-to-send (RxRTS Bit). 
¢ Select receiver-ready or FIFO-Full notification (R/F Bit). 
e Select character or block error mode (ERR Bit). 
e Select parity mode and type (PM and PT Bits). 
e Select number of bits per character (B/Cx Bits). 
Mode Register 2 (UMR2) 
e Select the mode of operation (CMx bits). 
e If preferred, program operation of transmitter ready-to-send (TxRTS Bit). 
e If preferred, program operation of clear-to-send (TxCTS Bit). 
e Select stop-bit length (SBx Bits). 
Command Register (UCR) 
e Enable the receiver and transmitter. 


ENABLA 


SERIAL MODULE ay 
ERRORS 
SINIT ; 


} INITIATE: 







CHANNEL 





INTERRUPTS 
ENABLE RECEIVER 


CHK1 
CALL CHCHK ieee 
REQUEST TO SEND 
~ SAVE CHANNEL SINITR 


STATUS 
RETURN 


Figure 14-8. VART Mode Programming Flowchart (Sheet 1 of 5) 
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Figure 14-8. UART Mode Programming Flowchart (Sheet 2 of 5) 
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Figure 14-8. VART Mode Programming Flowchart (Sheet 3 of 5) 
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Figure 14-8. VART Mode Programming Flowchart (Sheet 4 of 5) 
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Figure 14-8. UART Mode Programming Flowchart (Sheet 5 of 5) 
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SECTION 15 
M-BUS MODULE 


15.1 OVERVIEW 


Motorola bus (M-Bus) is a two-wire, bidirectional serial bus that provides a simple, efficient 
method of data exchange between devices. It is compatible with the widely used I°C bus 
standard'. This two-wire bus minimizes the interconnection between devices. 


This bus is suitable for applications requiring occasional communications over a short 
distance between many devices. The flexible M-Bus allows additional devices to be 
connected to the bus for expansion and system development. 


The interface operates up to 100 kbps with maximum bus loading and timing. 


The M-Bus system is a true multimaster bus including collision detection and arbitration that 
prevents data corruption if two or more masters attempt to control the bus simultaneously. 
This feature allows for complex applications with multiprocessor control. It can also be used 
for rapid testing and alignment of end products via external connections to an assembly line 
computer. 


15.2 INTERFACE FEATURES 
The M-Bus module has the following key features: 


¢ Compatibility with I@C Bus standard 

e Multimaster operation 

¢ Software-programmable for one of 64 different serial clock frequencies 
e Software-selectable acknowledge bit 





e Interrupt-driven byte-by-byte data transfer 

e Arbitration-lost interrupt with automatic mode switching from master to slave 
e Calling address identification interrupt 

e Start and stop signal generation/detection 

e Repeated START signal generation 

e Acknowledge bit generation/detection 

¢ Bus-busy detection 


'. 2C-Bus is a proprietary Philips interface bus. 
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Figure 15-1 shows the complete M-Bus module. 


ADDR IRQ DATA 


DATA_MUX 





CTRL_REG FREQ_REG ADDR_REG STATUS_REG DATA_REG 









IN/OUT 
DATA SHIFT 
REGISTER 











START, STOP, AND 
ARBITRATION 
CONTROL 


CONTROL | ADDRESS 
COMPARE 


SCL SDA 


Figure 15-1. M-Bus Module Block Diagram 
15.3 M-BUS SYSTEM CONFIGURATION 


The M-Bus system uses a serial data line (SDA) and a serial clock line (SCL) for data 
transfer. All devices connected to these two signals must have open drain or open collector 
outputs. The logic AND function is exercised on both lines with external pullup resistors. 


The default state of the M-Bus is as a slave receiver out of reset. Thus, when not 


programmed to be a master or responding to a slave transmit address, the M- Bus should 
always return to the default state of slave receiver. 
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NOTE 


This M-Bus module is designed to be compatible with the I2C 
bus protocol from Philips. For further information on M-Bus 
system configuration, protocol, and restrictions please refer to 
the Philips I7C Standard 


15.4 M-BUS PROTOCOL 


Normally, a standard communication is composed of four parts: (1) START signal, (2) slave 
address transmission, (3) data transfer, and (4) STOP signal. They are described briefly in 
the following sections and illustrated in Figure 15-2. 


. sis i fs foe fw | aw OOOCOOI0g [ 





START CALLING ADDRESS READ/ ACK DATA BYTE NO STOP 
SIGNAL WRITE BIT ae SIGNAL 
MSB LSB MSB LSB 
SCL 1 2 3 4 5 6| {7 8\ {9 1 2 3\ /4 5 6| {|7\ /8 9 





<——___>+>4# 4 {4 =«—_____+} } } 
START CALLING ADDRESS READ/ ACK — REPEATED NEW CALLING ADDRESS peanjWRITE NO STOP 
SIGNAL WRITE BIT — START ACK SIGNAL 
SIGNAL BIT 


Figure 15-2. M-Bus Standard Communication Protocol 


15.4.1 1START Signal 


When the bus is free, i.e., no master device is engaging the bus (both SCL and SDA lines 
are at logic high), a master can initiate communication by sending a START signal. As 
shown in Figure 15-2, a START signal is defined as a high-to-low transition of SDA while 
SCL is high. This signal denotes the beginning of a new data transfer (each data transfer 
can contain several bytes of data) and awakens all slaves. 


15.4.2 Slave Address Transmission 


The first byte of data transferred by the master immediately after the START signal is the 
slave address. This is a seven-bit calling address followed by a R/W bit. The R/W bit tells 
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the slave data transfer direction. No two slaves in the system can have the same address. 
In addition, if the M-Bus is master, it must not transmit an address that is equal to its slave 
address. The M-Bus cannot be master and slave at the same time. 


Only the slave with an address that matches the one transmitted by the master will respond 
by returning an acknowledge bit by pulling the SDA low at the 9th clock (see Figure 15-2). 


15.4.3 Data Transfer 


Once successful slave addressing is achieved, the data transfer can proceed on a byte-by- 
byte basis in the direction specified by the R/W bit sent by the calling master. 


Each data byte is 8 bits long. Data can be changed only while SCL is low and must be held 
stable while SCL is high, as shown in Figure 15-2. There is one clock pulse on SCL for each 
data bit with the MSB being transferred first. Each byte of data must be followed by an 
acknowledge bit, which is signalled from the receiving device by pulling the SDA low at the 
ninth clock. One complete data byte transfer needs nine clock pulses. 


If the slave receiver does not acknowledge the master, the SDA line must be left high by the 
slave. The master can then generate a stop signal to abort the data transfer or a start signal 
(repeated start) to commence a new calling. 


lf the master receiver does not acknowledge the slave transmitter after a byte transmission, 
it man-sized of data” to the slave. The slave releases the SDA line for the master to generate 
a STOP or START signal. 


15.4.4 Repeated START Signal 


As shown in Figure 15-2, a repeated START signal is a START signal generated without 
first generating a STOP signal to terminate the communication. The master uses this 
method to communicate with another slave or with the same slave in a different mode 
(transmit/receive mode) without releasing the bus. 


15.4.5 STOP Signal 


The master can terminate the communication by generating a STOP signal to free the bus. 
However, the master can generate a START signal followed by a calling command without 
generating a STOP signal first. This is called repeated START. A STOP signal is defined as 
a low-to-high transition of SDA while SCL is at logical 1 (see Figure 15-2). Note that a master 
can generate a STOP even if the slave has made an acknowledgment at which point the 
slave must release the bus. 


15.4.6. Arbitration Procedure 


M-Bus is a true multimaster bus that allows more than one master to be connected on it. If 
two or more masters try to simultaneously control the bus, a clock synchronization 
procedure determines the bus clock, for which the low period is equal to the longest clock 
low period and the high is equal to the shortest one among the devices. A data arbitration 
procedure determines the relative priority of the contending masters. A bus master loses 
arbitration if it transmits logic 1 while another master transmits logic 0. The losing masters 
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immediately switch over to slave-receive mode and stop driving SDA output. In this case, 
the transition from master to slave mode does not generate a STOP condition. Meanwhile, 
the M-Bus or I°C device sets a status bit to indicate loss of arbitration. 


15.4.7 Clock Synchronization 


Because wire-AND logic is performed on SCL line, a high-to-low transition on SCL line 
affects all the devices connected on the bus. The devices start counting their low period 
when the master drives the SCL line low. Once a device clock has gone low, it holds the 
SCL line low until the clock high state is reached. However, the change of low to high in this 
device clock may not change the state of the SCL line if another device clock is still within 
its low period. Therefore, synchronized clock SCL is held low by the device with the longest 
low period. Devices with shorter low periods enter a high wait state during this time (see 
Figure 15-3). When all devices concerned have counted off their low period, the 
synchronized clock SCL line is released and pulled high. There is then no difference 
between the device clocks and the state of the SCL line and all the devices start counting 
their high periods. The first device to complete its high period pulls the SCL line low again. 


| WAIT | START COUNTING HIGH PERIOD 
> 


SCL 





SCL2 eee 7 
\ 





SCL 











INTERNAL COUNTER RESET 


Figure 15-3. Synchronized Clock SCL 
15.4.8 Handshaking 


The clock synchronization mechanism can be used as a handshake in data transfer. Slave 
devices can hold the SCL line low after completion of one byte transfer (9 bits). In such 
cases, it halts the bus clock and forces the master clock into wait states until the slave 
releases the SCL line. 


15.4.9 Clock Stretching 


Slaves can use the clock synchronization mechanism to slow down the transfer bit rate. 
After the master has driven SCL low the slave can drive SCL low for the required period and 
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then release it. If the slave SCL low period is greater than the master SCL low period, the 
resulting SCL bus signal low period is stretched. : 


15.5 PROGRAMMING MODEL 


Five registers are used in the M-Bus interface and the internal configuration of these 
registers is discussed in the following paragraphs. The programmer’s model of the M-Bus 
interface is shown below in Table 15-1. | 


Table 15-1. M-Bus Interface Programmer’s Model 


ADDRESS | M-BUS MODULE REGISTERS 
MBAR+$280 M-Bus Address Register (MADR) 


MBAR+$284 M-Bus Frequency Divider Register (MFDR) 
MBAR+$288 M-Bus Control Register (MBCR) 
MBAR+$28C M-Bus Status Register (MBSR) 

) 


MBAR+$290 M-Bus Data I/O Register (MBDR 





15.5.1 M-Bus Address Register (MADR) 


This register contains the address the M-Bus wil respond to when addressed as a slave; 
note that it is not the address sent on the bus during the address transfer. 


M-Bus Address Register (MADR) Address MBAR+$280 

7 6 5 4 3 2 1 0 
[abr | aons [aoné [apne [abra [apra [ Dat | -—| 

RESET 0 0 0 0 0 0 0 0 
Read/Write Supervisor or User Mode 


ADR7-ADR1 — Slave Address 
Bit 1 to bit 7 contain the specific slave address to be used by the M-Bus module. 


NOTE 


The default mode of M-Bus is slave mode for an address match 
on the bus. 


15.5.2 M-Bus Frequency Divider Register (MFDR) 


MEDR ies Divider Register Address MBAR+$284 


7 6 5 4 3 2 1 0 
xa 
0 0 0 0 0 0 0 0 


Read/Write Supervisor or User Mode 


RESET 


MBC5-—MBCO — M-Bus Clock Rate 5-0 


This field is used to prescale the clock for bit rate selection. Due to the potential slow rise 
and fall times of the SCL and SDA signals, the bus signals are sampled at the prescaler 
frequency. The serial bit clock frequency is equal to the CPU clock divided by the divider 
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shown in Table 15-2 *. Note that the MFDR frequency value can be changed at any point in 
a program. 


Table 15-2. MBUS Prescalar Values 





@-In previous implementations of the M-Bus (e.g., MC68307), the MBC[5] bit was not implemented. Clearing 
this bit in software maintains complete compatibility with such products. 
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15.5.3 M-Bus Control Register (MBCR) 


M-Bus Control Register (MBCR) Address MBAR+$288 
7 6 5 4 8 2 1 0 
| MEN | wien | wsta | mx | Txak [ Asta] = || 
RESET 0 0 0 0 0 0 0 0 
Read/Write Supervisor or User Mode 


MEN — M-Bus Enable 
This bit controls the software reset of the entire M-Bus module. 


1 = The M-Bus module is enabled. This bit must be set before any other MBCR bits 
have any effect. 
0= The module is disabled, but registers can still be accessed. 


lf the M-Bus module is enabled in the middle of a byte transfer, the interface behaves as 
follows: the slave mode ignores the current transfer on the bus and starts operating 
whenever a subsequent start condition is detected. Master mode will not be aware that the 
bus is busy; therefore, if a start cycle is initiated, the current bus cycle can become corrupt. 
This would ultimately result in either the current bus master or the M-Bus module losing 
arbitration, after which bus operation would return to normal. 


MIEN — M-Bus Interrupt Enable 
1 = Interrupts from the M-Bus module are enabled. An M-Bus interrupt occurs provided 
the MIF bit in the status register is also set. 
0 = Interrupts from the M-Bus module are disabled. This does not clear any currently 
pending interrupt condition. 


MSTA — Master/Slave Mode Select Bit 


At reset, this bit is cleared. When this bit is changed from 0 to 1,a START signal is generated 
on the bus, and the master mode is selected. When this bit is changed from 1 to 0, aSTOP 
signal is generated and the operation mode changes from master to slave. 


MSTA is cleared without generating a STOP signal when the master loses arbitration. 


1 = Master Mode 
O= Slave Mode 


MTX — Transmit/Receive mode select bit 

This bit selects the direction of master and slave transfers. When addressed as a slave this 
bit should be set by software according to the SRW bit in the status register. In master mode, 
this bit should be set according to the type of transfer required. Therefore, for address 
cycles, this bit will always be high. 


1= Transmit 
0O= Receive 
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TXAK — Transmit Acknowledge Enable 


This bit specifies the value driven onto SDA during acknowledge cycles for both master and 
slave receivers. Note that writing this bit only applies when the M-Bus is a receiver, not 
a transmitter. 


1 = No acknowledge signal response is sent (i.e., acknowledge bit = 1) 
0= Anacknowledge signal will be sent out to the bus at the 9th clock bit after receiving 
one byte data 


RSTA — Repeat Start 


Writing a 1 to this bit will generate a repeated START condition on the bus, provided it is the 
current bus master. This bit will always be read as a low. Attempting a repeated start at the 
wrong time, if the bus is owned by another master, will result in loss of arbitration. 


1= Generate repeat start cycle 


15.5.4 M-Bus Status Register (MBSR) 


This status register is read-only with the exception of bit 1 (MIF) and bit 4 (MAL), which can 
be cleared by software. All bits are cleared on reset except bit 7 (MCF) and bit 0 (RXAK), 
which are set (=1) at reset. 


M-Bus Status Register (MBSR) Address MBAR+$28C 


7 6 5 4 3 2 1 0 
RESET 1 0 0 0 0 0 0 1 
Read/Write Supervisor or User Mode 


MCF — Data Transferring Bit 


While one byte of data is being transferred, this bit is cleared. It is set by the falling edge of 
the 9th clock of a byte transfer. 


1= Transfer complete 
O= Transfer in progress 





MAAS — Addressed as a Slave Bit ; 

When its own specific address (M-Bus Address Register) is matched with the calling 
address, this bit is set. The CPU is interrupted provided the MIEN is set. Next, the CPU must 
check the SRW bit and set its TX/RX mode accordingly. 

Writing to the M-Bus Control Register clears this bit. 


1 = Addressed as a slave 
O= Not addressed 
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MBB — Bus Busy Bit 
This bit indicates the status of the bus. When a START signal is detected, the MBB is set. If 
a STOP signal is detected, it is cleared. | 


1 = Bus is busy 

O= Bus is idle 
MAL — Arbitration Lost 
Hardware sets the arbitration lost bit (MAL) when the arbitration procedure is lost. Arbitration 
is lost in the following circumstances: 


1. SDA sampled as low when the master drives a high during an address or data-transmit 
cycle. 


2. SDA sampled as a low when the master drives a high during the acknowledge bit of a 
data-receive cycle. 


3. A start cycle is attempted when the bus is busy. 
4. A repeated start cycle is requested in slave mode. 
5. A stop condition is detected when the master did not request it. 


This bit must be cleared by software by writing a low to it. 


SRW — Slave Read/Write 


When MAAS is set, this bit indicates the value of the R/W command bit of the calling address 
sent from the master. This bit is valid only when 1) a complete transfer has occurred and no 
other transfers have been initiated and 2) M-Bus is a slave and has an address match. 
Checking this bit, the CPU can select slave transmit/receive mode according to the 
command of the master. 


1 = Slave transmit, master reading from slave 
O= Slave receive, master writing to slave 


MIF — M-Bus Interrupt 


The MIF bit is set when an interrupt is pending, which will cause a processor interrupt 
request (provided MIEN is set). MIF is set when one of the following events occurs: 


1. Complete one byte transfer (set at the falling edge of the 9th clock) 
2. Receive a calling address that matches its own specific address in slave-receive mode 
3. Arbitration lost 


This bit must be cleared by software by writing a low to it in the interrupt routine. 


RXAK — Received Acknowledge 


The value of SDA during the acknowledge bit of a bus cycle. If the received acknowledge 
bit (RXAK) is low, it indicates an acknowledge signal has been received after the completion 
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of 8 bits data transmission on the bus. If RXAK is high, it means no acknowledge signal has 
been detected at the 9th clock. 


1 = No acknowledge received 
O= Acknowledge received 


15.5.5 M-Bus Data I/O Register (MBDR) 


M-Bus Data I/O Register (MBDR) Address MBAR+$290 
f 6 5 4 3 2 1 0 
Por [pe [os [oe | oe | oe | | oo 
0 0 0 0 0 0 0 0 
Read/Write Supervisor or User Mode 


When an address and R/W bit is written to the MBDR and the M-Bus is the master, a 
transmission will start. When data is written to the MBDR, a data transfer is initiated. The 
most significant bit is sent first in both cases. In the master-receive mode, reading the MBDR 
register allows the read to occur but also initiates next byte data receiving. In slave mode, 
the same function is available after it is addressed. 


15.6 M-BUS PROGRAMMING EXAMPLES 


RESET 


15.6.1 Initialization Sequence 


Reset will put the M-Bus Control Register to its default status. Before the interface can 
transfer serial data, you must perform an initialization procedure as follows: 


1. Update the Frequency Divider Register (MFDR) and select the required division ratio 
to obtain SCL frequency from the system bus clock. 


2. Update the M-Bus Address Register (MADR) to define its slave address. 


3. Set the MEN bit of the M-Bus Control Register (MBCR) to enable the M-Bus interface 
system. | 


4. Modify the bits of the M-Bus Control Register (MBCR) to select master/slave mode, 
transmit/receive mode, and interrupt-enable or not. 


15.6.2 Generation of START 


After completion of the initialization procedure, you can transmit serial data by selecting the 
“master transmitter” mode. If the device is connected to a multimaster bus system, you must 
test the state of the M-Bus Busy Bit (MBB) to check whether the serial bus is free. 


If the bus is free (MBB=0), the start condition and the first byte (the slave address) can be 
sent. The data written to the data register comprises the address of the desired slave and 
the LSB is set to indicate the direction of transfer required. 


The bus free time (i.e., the time between a STOP condition and the following START 
condition) is built into the hardware that generates the START cycle. Depending on the 
relative frequencies of the system clock and the SCL period, you may have to wait until the 
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M-Bus is busy after writing the calling address to the MBDR before esa with the 
following instructions. 


An example of a program that generates the START signal and transmits the first byte of 
data (slave address) is shown below: 


CHFLAGMOVE.BMBSR, - (A7) ; Check the MBB bit of the BTST. 

BH5, (A7)+ 

BNE.SCHFLAG; Status Register. If it is set, wait until it is clear 
TXSTARTMOVE.BMBCR, - (A7); Set transmit mode 

BSET.B#4, (A7) 

MOVE.B(A7)+, MBCR 

MOVE.BMBCR, -(A7); Set master mode 

BSET.B#5, (A7); Generate START condition 

MOVE.B(A7)+, MBCR; 

MOVE. BCALLING, - (A7) ; Transmit the calling address, DO=R/W 

MOVE.B(A7)+, MBDR; 

MBFREEMOVE.BMBSR,-(A7); Check the MBB bit of the Status Register. If it is clear, 


oD om OG wait until it is set. 
BTST.B#5, (A7)+; 
BEQ.SMBFREE; 


15.6.3 Post-Transfer Software Response 


Transmission or reception of a byte will set the data transferring bit (MCF) to 1, which 
indicates one byte communication is finished. The M-Bus interrupt bit (MIF) is also set. An 
interrupt will be generated if the interrupt function is enabled during initialization by setting 
the MIEN bit. Software must clear the MIF bit in the interrupt routine first. The MCF bit will 
be cleared by reading from the M-Bus Data I/O Register (MDR) in receive mode or writing 
to MDR in transmit mode. 


Software can service the M-Bus 1/O in the main program by monitoring the MIF bit if the 
interrupt function is disabled. Polling should monitor the MIF bit rather than the MCF bit 
because that operation is different when arbitration is lost. 


When an interrupt occurs at the end of the address cycle, the master will always be in 
transmit mode, i.e. the address is transmitted. If master receive mode is required, indicated 
by R/W bit in MBDR, then the MTX bit should be toggled. 


During slave-mode address cycles (MAAS=1), the SRW bit in the status register is read to 
determine the direction of the subsequent transfer and the MTX bit is programmed 
accordingly. For slave-mode data cycles (MAAS=0), the SRW bit is not valid. The MTX bit 
in the control register should be read to determine the direction of the current transfer. 


The following is an example of a software response by a “master transmitter’ in the interrupt 
routine (see Figure 15-4). 
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ISRLEA.LMBSR, - (A7); Load effective address 
BCLR.B#1, (A7)+; Clear the MIF flag 

MOVE. BMBCR, - (A7) ; Push the address on stack, 
BTST.B#5, (A7)+; check the MSTA flag 
BEQ.SSLAVE; Branch if slave mode 

MOVE. BMBCR, - (A7) ; Push the address on stack, 
BTST.B#4, (A7)+; check the mode flag 
BEQ.SRECEIVE; Branch if in receive mode 
MOVE. BMBSR, - (A7); Push the address on stack, 
BTST.B#0, (A7)+; check ACK from receiver 
BNE.B END; If no ACK, end of transmission 
TRANSMITMOVE.BDATABUF,-(A7); Stack data byte 
MOVE.B(A7)+, MBDR; Transmit next byte of data 


15.6.4 Generation of STOP 


A data transfer ends with a STOP signal generated by the “master” device. A master 
transmitter can generate a STOP signal after all the data has been transmitted. The 
following code is an example showing how a master transmitter generates a stop condition. 


MASTXMOVE.BMBSR, -(A7); If no ACK, branch to end 

BTST.B#0, (A7) + 

BNE.B END 

MOVE.BTXCNT, DO; Get value from the transmitting counter 
BEQ.SEND; If no more data, branch to end 

MOVE. BDATABUF, - (A7) ; Transmit next byte of data 

MOVE .B(A7)+,MBDR 

MOVE.BTXCNT, DO; Decrease the TXCNT 


SUBQ.L#1,D0 
MOVE. BDO, TXCNT 


BRA.SEMASTX; Exit 

ENDLEA.LMBCR, - (A7) ; Generate a STOP condition 
BCLR.B#5, (A7)+ 

EMASTXRTE; Return from interrupt 


lf a master receiver wants to terminate a data transfer, it must inform the slave transmitter 
by not acknowledging the last byte of data, which can be done by setting the transmit 
acknowledge bit (T XAK) before reading the 2nd to last byte of data. Before reading the last 
byte of data, a STOP signal must first be generated. The following code is an example 
showing how a master receiver generates a STOP signal. 


MASRMOVE.BRXCNT, DO; Decrease RXCNT 
SUBQ.L#1,D0 
MOVE.BDO,RXCNT 


BEQ.SENMASR; Last byte to be read 

MOVE.BRXCNT,D1; Check second-to-last byte to be read 
EXTB>LD1 

SUBI.L#1,D1; 

BNE . SNXMAR ; Not last one or second last 
LAMARBSET.B#3,MBCR; Disable ACK 

BRANXMAR Transmitting 


ENMASRBCLR.B#5,MBCR; Last one, generate 'STOP'signal 
NXMARMOVE.BMBDR,RXBUF; Read data and store RTE 
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15.6.5 Generation of Repeated START 


At the end of data transfer, if the master still wants to communicate on the bus, it can 
generate another START signal followed by another slave address without first generating 
a STOP signal. A program example follows. 


RESTARTMOVE.BMBCR,-(A7); Another START (RESTART) 

BSET.B#2, (A7) 

MOVE.B(A7)+, MBCR 

MOVE. BCALLING, - (A7) ; Transmit the calling address, DO=R/W- 
MOVE .BCALLING, - (A7) ; 

MOVE.B(A7)+, MBDR 


15.6.6 Slave Mode 


In the slave interrupt service routine, the module addressed as slave bit (MAAS) should be 
tested to check if a calling of its own address has just been received. If MAAS is set, software 
should set the transmit/receive mode select bit (MTX bit of MBCR) according to the R/W 
command bit (SRW). Writing to the MBCR clears the MAAS automatically. The only time 
MAAS is read as set is from the interrupt at the end of the address cycle where an address 
match occurred; interrupts resulting from subsequent data transfers will have MAAS 
cleared. A data transfer can now be initiated by writing information to MBDR, for slave 
transmits, or read from MBDR, in slave-receive mode. A dummy read of the MBDR in slave/ 
receive mode will release SCL, allowing the master to transmit data. 


In the slave transmitter routine, the received acknowledge bit (RXAK) must be tested before 
transmitting the next byte of data. Setting RXAK means an “end-of-data” signal from the 
master receiver, after which it must be switched from transmitter mode to receiver mode by 
software. A read from MBDR then releases the SCL line so that the master can generate a 
STOP signal. 


15.6.7 Arbitration Lost 


If several masters try to simultaneously engage the bus, only one master wins and the 
others lose arbitration. The devices that lost arbitration are immediately switched to slave 
receive mode by the hardware. Their data output to the SDA line is stopped, but SCL is still 
generated until the end of the byte during which arbitration was lost. An interrupt occurs at 
the falling edge of the ninth clock of this transfer with MAL=1 and MSTA=0. If one master 
tries to transmit or do a START while the bus is being engaged by another master, the 
hardware will: (1) inhibit the transmission, (2) switch the MSTA bit from 1 to 0 without 
generating STOP condition, (3) generate an interrupt to CPU and, (4) set the MAL to indicate 
the failed attempt to engage the bus. When considering these cases, the slave service 
routine should test the MAL first and the software should clear the MAL bit if it is set. 
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Figure 15-4. Flow-Chart of Typical M-Bus Interrupt Routine 
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SECTION 16 
DEBUG SUPPORT 


This section details the hardware debug support functions within the ColdFire family of 
processors. The Version 3 ColdFire implements an enhanced debug architecture compared 
to the original specification. The original design plus these enhancements is known as 
Revision B (or Rev. B), while the initial definition is Revision A (or Rev. A). The enhanced 
functionality is clearly identified in this section. The Rev. B enhancements are backward 
compatible with the original ColdFire debug definition. 


The general topic of debug support is divided into three separate areas: 


e Real-Time Trace Support 
e Background Debug Mode (BDM) 
e Real-Time Debug Support 


Each of the three areas is addressed in detail in the following subsections. 


The logic required to support these three areas is contained in a Debug Module, which is 
shown in the system block diagram in Figure 16-1. 


COLDFIRE CPU 
CORE 
DEBUG 

MODULE 


; COMMUNICATION PORT 
CONTROL TRACE PORT DSCLK, DSI, DSO 


BKPT DDATA, PST, PSTCLK 


HIGH SPEED 
LOCAL BUS 









Figure 16-1. Processor/Debug Module Interface 
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16.1 SIGNAL DESCRIPTION 


This section describes the ColdFire 53xx signals associated with the Debug Module. All 
ColdFire debug signals are unidirectional and related to the rising-edge of the processor 
core’s clock signal. 


16.1.1 Breakpoint (BKPT) 


16.1.1.1 REV A FUNCTIONALITY. This active-low, input signal is used to request a manual 
breakpoint. It’s assertion causes the processor to enter a halted state after the completion 
of the current instruction. The halt status is reflected on the processor status (Pst) pins as 
the value $F. 


16.1.1.2 REV. B ENHANCEMENT. In addition to the baseline functionality, if the BKD bit of 
the Configuration/Status Register is set (CSR[18]), the assertion of the BKPT signal 
generates a debug interrupt exception in the processor. 


16.1.2 Debug Data (DDATA[3:0}]) 


These output signals display the hardware register breakpoint status as a default, or 
optionally, captured address and operand values. The capturing of data values is controlled 
by the setting of the CSR. Additionally, execution of the WDDATA instruction by the 
processor captures operands which are displayed on DDATA. These signals are updated 
each processor cycle. 


16.1.3 Development Serial Clock (DSCLK) 


This input signal is synchronized internally and provides the clock for the serial 
communication port to the Debug Module. The maximum frequency is 1/5 the speed of the 
processor's clock (ck). At the synchronized rising edge of DSCLK, the data input on DSI is 
sampled, and the DSO output changes state. 





16.1.4 Development Serial Input (DSI) 


The input signal is synchronized internally and provides the data input for the serial 
communication port to the Debug Module. 


16.1.5 Development Serial Output (DSO) 


This signal provides serial output communication for the Debug Module responses. 


16.1.6 Processor Status (PST[3:0]) 


These output signals report the processor status. Table 16-1 shows the encoding of these 
signals. These outputs indicate the current status of the processor pipeline and, as a result, 
are not related to the current bus transfer. The PST value is updated each processor cycle. 


16.1.7 Processor Status Clock (PSTCLK) 


Since the debug trace port signals transition each processor cycle and are not related to the 
external bus frequency, an additional signal is output from the ColdFire microprocessor. The 
PSTCLK signal is a delayed version of the processor’s high-speed clock and its rising-edge 
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is used by the development system to sample the values on the PST and DDATA output 
buses. The PSTCLK signal is intended for use in the standard 26-pin debug connector. 


If the real-time trace functionality is not being used, the PCD bit of the CSR may be set 
(CSR[17] = 1) to force the PSTCLK, PST and DDATA outputs to be quiescent and not toggle 
at the processor’s clock speed. 


Table 16-1. Processor Status Encoding 


PST[3:0] 
DEFINITION 
(HEX) | (BINARY) 
























0 [0000 [Continue execution 
0100 | Begin execution of PULSE and WDDATA instructions 
/ [oo CRs 
[9 [1001 | __—Begin2bytetransferonDDATA 
[$0 | 1101 | Emulator-mode entry exception processingt 
[SE | 1110 _[ Processor is stopped, waiting for interruptt | 
NOTE: tThese encodings are asserted for multiple cycles. 


1 Rev. B ehnancement. 


16.2 REAL-TIME TRACE SUPPORT 


In the area of debug functions, one fundamental requirement is support for real-time trace 
functionality, i.e., definition of the dynamic execution path. The ColdFire 53xx solution is to 
include a parallel output port providing encoded processor status and data to an external 
development system. This port is partitioned into two nibbles (4 bits): one nibble allows the 
processor to transmit information concerning the execution status of the core (processor 
status, pst), while the other nibble allows operand data to be displayed (debug data, ppata). 
The processor status (PST) timing is synchronous with the processor clock (cLk) and may 
not be related to the current bus transfer. Table 16-1 shows the encoding of these signals. 


The processor status (pst) outputs can be used with an external image of the program to 
completely track the dynamic execution path of the machine when used with external 
development systems. The tracking of this dynamic path is complicated by any change-of- 
flow operation. This is especially evident when the branch target address is calculated 
based on the contents of a program-visible register (variant addressing.) For this reason, the 
debug data (ppata) outputs can be configured to display the target address of these types of 
change-of-flow instructions. Because the DDATA bus is only 4 bits wide, the address is 
displayed a nibble at a time across multiple clock cycles. 
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The Debug Module includes two 32-bit storage elements for capturing the internal ColdFire 
53xx bus information. These two elements effectively form a FIFO buffer connecting the 
processor's high-speed local bus to the external development system through the ppata 
signals. The FIFO buffer captures branch target addresses along with certain operand data 
values for eventual display on the DDATA output port on nibble at a time starting with the 
least-significant bit. The execution speed of the ColdFire processor is affected only when 
both storage elements contain valid data waiting to be dumped onto the DDATA port. In this 
case, the processor core is stalled until one FIFO entry is available. In all other cases, data 
output on the DDATA port does not impact execution speed. 7 


16.2.1 Processor Status Signal Encoding 


The processor status (pst) signals are encoded to reflect the state of the Operand Execution 
Pipeline, and are generally not related to the current external bus transfer. 


16.2.1.1 CONTINUE EXECUTION (PST = $0). Many instructions complete in a single 
processor cycle. If an instruction requires more clock cycles, the subsequent clock cycles 
are indicated by driving the pst outputs with this encoding. 


16.2.1.2 BEGIN EXECUTION OF AN INSTRUCTION (PST = $1). For most instructions, 
this encoding signals the first clock cycle of an instruction’s execution. Certain change-of- 
flow opcodes, plus the PULSE and WDDATA instructions generate different encodings. 


16.2.1.3 ENTRY INTO USER MODE (PST = $3). This encoding indicates the ColdFire 
processor has entered user mode. This encoding is signaled after the instruction which 
caused the user mode entry has executed (signaled with the appropriate encoding.) 


16.2.1.4 BEGIN EXECUTION OF PULSE OR WDDATA INSTRUCTIONS (PST = $4). 
The ColdFire 53xx instruction set architecture includes a PULSE opcode. This opcode 
generates a unique pst encoding, $4, when executed. This instruction can define logic 
analyzer triggers for debug and/or performance analysis. Additionally, a WODATA 
instruction is supported that allows the processor core to write any operand (byte, word, 
longword) directly to the ppata port, independent of any Debug Module configuration. This 
opcode also generates the special PST encoding ( $4) when executed, followed by the 
appropriate marker and then the data transfer on the DDATA outputs. The length of the data 
transfer is dependent on the operand size of the WDDATA instruction. 


16.2.1.5 BEGIN EXECUTION OF TAKEN BRANCH (PST = $5). This encoding is 
generated whenever a taken branch is executed. For certain opcodes, the branch target 
address may be optionally displayed on ppata depending on the control parameters 
contained in the configuration/status register (csr). The number of bytes of the address to 
be displayed is also controlled in the CSR and indicated by the PST marker value 
immediately preceding the DDATA outputs. 


The bytes are always displayed in a least-significant to most-significant order. The 
processor captures only those target addresses associated with taken branches using a 
variant addressing mode, i.e., all JMP and JSR instructions using address register indirect 
or indexed addressing modes, all RTE and RTS instructions as well as all exception vectors. 
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The simplest example of a branch instruction using a variant address is the compiled code 
for a C language “case” statement. Typically, the evaluation of this statement uses the 
variable of an expression as an index into a table of offsets, where each offset points to a 
unique case within the structure. For these types of change-of-flow operations, the ColdFire 
53xx processor uses the debug pins to output a sequence of information on successive 
processor clock cycles 


1. Identify a taken branch has been executed using the pst pins ($5). 


2. Using the pst pins, optionally signal the target address is to be displayed on the ppata 
pins. The encoding ($9, $A, $B) identifies the number of bytes that are displayed. 


3. The new target address is optionally available on subsequent cycles using the nibble- 
wide ppata port. The number of bytes of the target address displayed on this port is a 
configurable parameter (2, 3, or 4 bytes). | 


Another example of a variant branch instruction would be a JMP (AO) instruction. If the csr 
was programmed to display the lower two bytes of an address, the outputs of the pst and 
DDATA signals when this instruction executed are shown in Figure 16-2. 


PSTCLK 


PST 





0 


Figure 16-2. Example PST/DDATA Diagram 


DDATA 





pst is driven with a $5 indicating a taken branch. In the second cycle, PST is driven with a 
marker value of $9 indicating a two-byte address that is displayed four bits at a time on the 
DDATA Signals over the next four clock cycles. The remaining four clock cycles display the 
lower two-bytes of the address (AO), least significant nibble to most significant nibble. The 
output of the PST signals after the JMP instruction completes is dependent on the target 
instruction. The PST can continue with the next instruction before the address has. 
completely displayed on the DDATA because of the DDATA FIFO. If the FIFO is full and the 
next instruction needs to display captured values on DDATA, the pipeline stalls (PST = $0) 
until space is available in the FIFO. 


16.2.1.6 BEGIN EXECUTION OF RTE INSTRUCTION (PST = $7). The unique encoding 
is generated whenever the return-from-exception (RTE) instruction is executed. 


16.2.1.7 BEGIN DATA TRANSFER (PST = $8 - $B). These encodings serve as markers 
to indicate the number of bytes to be displayed on the ppata port on subsequent clock cycles. 
This encoding is driven onto the pst port one processor cycle before the actual data is 
displayed on DDATA. When PST outputs a $8/$9/$A/$B marker value, the DDATA port 
outputs 1/2/3/4 bytes of captured data respectively on consecutive processor cycles. 
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16.2.1.8 EXCEPTION PROCESSING (PST = $C). This encoding is displayed during 
normal exception processing. Exceptions which enter emulation mode (debug interrupt, or 
optionally trace) generate a different encoding. Because this encoding defines a multicycle 
mode, the pst outputs are driven with this value until exception processing is completed. 


16.2.1.9 EMULATOR MODE EXCEPTION PROCESSING (PST = $D). This encoding is 
displayed during emulation mode (debug interrupt, or optionally trace). Because this 
encoding defines a multicycle mode, the est outputs are driven with this value until exception 
processing is completed. 


16.2.1.10 PROCESSOR STOPPED (PST = $E). This encoding is generated as a result of 
the STOP instruction. The ColdFire processor remains in the stopped state until an interrupt 
occurs. Because this encoding defines a multicycle mode, the pst outputs are driven with 
this value until the stopped mode is exited. 


16.2.1.11 PROCESSOR HALTED (PST = $F). This encoding is generated when the 
ColdFire processor is halted (see Section 16.3.1 CPU Halt.) Because this encoding defines 
a multicycle mode, the pst outputs are driven with this value until the processor is restarted, 
or reset. 


16.3 BACKGROUND-DEBUG MODE (BDM) 


The ColdFire Family supports a modified version of the background debug mode (BDM) 
functionality found on Motorola’s CPU32 family of parts. BDM implements a low-level 
system debugger in the microprocessor hardware. Communication with the development 
system is handled via a dedicated, high-speed serial command interface. 


Unless noted otherwise, the BDM functionality provided by ColdFire is a proper subset of 
the CPU32 functionality. The main differences include the following: 


ColdFire 53xx implements the BDM controller in a dedicated hardware module. 
Although some BDM operations do require the CPU to be halted (e.g. CPU register 
accesses), other BDM commands such as memory accesses can be executed while 
the processor is running. 


On CPU32 parts, the pso signal can inform hardware that a serial transfer can start. 
ColdFire clocking schemes restrict the use of this bit. Because DSO changes only when 
pscLk is high, DSO cannot be used to indicate the start of a serial transfer. The 
development system count the number of clocks in any given transfer. 


The read/write system register commands, RSREG and WSREG, have been replaced 
by read/write control register commands, RCREG and WCREG. These commands use 
the register coding scheme from the MOVEC instruction. 


The read/write Debug Module register commands, RDMREG and WDMREG, have 
been added to support Debug Module register accesses. | 


CALL and RST commands are not supported and generates an illegal command 
response. 


Illegal command responses can be returned using the FILL and DUMP commands, if 
not immediately preceded by certain, specific BDM commands. 
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e For any command performing a byte-sized memory read operation, the upper 8 bits of 
the response data are undefined. The referenced data is returned in the lower 8 bits of 
the response. 


e The Debug Module forces alignment for memory-referencing operations: long accesses 
are forced to a 0-modulo-4 address; word accesses are forced to a 0-modulo-2 
address. An address error response is never returned. 


16.3.1 CPU Halt 


Although many BDM operations can occur in parallel with CPU operation, unrestricted BDM 
operation requires the CPU to be halted. A number of sources can cause the CPU to halt, 
including the following as shown in order of priority: 


1. The occurrence of the catastrophic fault-on-fault condition automatically halts the 
processor. 


2. The occurrence of a hardware breakpoint can be configured to generate a pending halt 
condition in a manner similar to the assertion of the Bxpt signal. In all cases, the 
assertion of this type of halt is first made pending in the processor. Next, the processor 
samples for pending halt and interrupt conditions once per instruction. Once the 
pending condition is asserted, the processor halts execution at the next sample point. 
See Section 16.4.1 Theory of Operation for more detail. 


3. The execution of the HALT instruction, also known as BGND on the 688xx devices, 
immediately suspends execution. By default this is a supervisor instruction and 
attempted execution while in user mode generates a privilege violation exception. A 
User Halt Enable (UHE) control bit is provided in the Configuration/Status Register 
(csr) to allow execution of HALT in user mode. The processor may be restarted after 
the execution of the HALT instruction by serial shifting a “GO” command into the debug 
module. Execution continues at the instruction following the HALT opcode. 


4. The assertion of the sxpt input pin is treated as a pseudo-interrupt, i.e., the halt 
condition is made pending until the processor core samples for halts/interrupts. The 
processor samples for these conditions once during the execution of each instruction. 
If there is a pending halt condition at the sample time, the processor suspends 
execution and enters the halted state. 


There are two special cases involving the assertion of the Bxpt pin to be considered. 


After the system reset signal is negated, the processor waits for 16 clock cycles before 
beginning reset exception processing. If the Bxet input pin is asserted within the first eight 
cycles after RSTI is negated, the processor enters the halt state, signaling that halt status, ( 
$F), on the pst outputs. While in this state, all resources accessible via the Debug Module 
can be referenced. This is the only opportunity to force the ColdFire processor into 
emulation mode via the EMU bit in the configuration/status register (csr). Once the system 
initialization is complete, the processor response to a BDM GO command is dependent on 
the set of BDM commands performed while breakpointed. Specifically, if the processor's pc 
register was loaded, then the GO command simply causes the processor to exit the halted 
state and pass control to the instruction address contained in the PC. Note in this case, the 
normal reset exception processing is bypassed. Conversely, if the PC register was not 
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loaded, then the GO command causes the processor to exit the halted state and continue 
with reset exception processing. 


ColdFire also handles a special case of the assertion of sket while the processor is stopped 
by execution of the STOP instruction. For this case, the processor exits the stopped mode 
and enters the halted state. Once halted, all BDM commands may be exercised. When the 
processor is restarted, it continues with the execution of the next sequential instruction, i.e., 
the instruction following the STOP opcode. 


The halt source is indicated in csr[27:24]. For simultaneous halt conditions, the highest 
priority source is indicated. 


16.3.2 BDM Serial Interface 


Once the CPU is halted and the halt status reflected on the pst outputs, the development 
system may send unrestricted commands to the Debug Module. The Debug Module 
implements a synchronous protocol using a three-pin interface: development serial clock 
(pscLk), development serial input (psi), and development serial output (bso). The 
development system serves as the serial communication channel master and is responsible 
for generation of the clock (DSCLK). The operating range of the serial channel is DC to 1/5 
of the processor frequency. The channel uses a full duplex mode, where data is transmitted 
and received simultaneously by both master and slave devices. The transmission consists 
of 17-bit packets composed of a status/control bit and a 16-bit data word. As seen in Figure 
16-3, all state transitions are enabled on a rising edge of the processor clock when DSCLK 
is high, i.e., DSI is sampled and DSlis driven. The DSCLK signal must also be sampled low 
(on a positive edge of CLK) between each bit exchange. The MSB is transferred first. 











CPU CLK 


PSTCLK 


pice Lee Be oe . 
Ds! TEER as: 





BDM STATE 
MACHINE 


DSO 




















Both psc.k and psi are synchronized inputs. The DSCLK signal essentially acts as a pseudo 
“clock enable” and is sampled on the rising edge of CLK as well as the DSI. The bso output 
is delayed from the DSCLK-enabled CLK rising edge. All events in the Debug Module’s 
serial state machine are based on the rising edge of the microprocessor clock). 
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16.3.2.1 RECEIVE PACKET FORMAT. The basic receive packet of information is 17 bits 
long, 16 data bits plus a status bit, as shown below in Figure 16-4. 


i _# S AS NSec  ae N Ua De 
ies 


Figure 16-4. Receive BDM Packet 






Status[16] 
The status bit indicates the status of CPU-generated messages as listed in Table 16-2. 


Table 16-2. CPU-Generated Message Encoding 


0 aoe fo Vaid Data Transfer 


Error - Terminated Bus Cycle; Data Invalid 


Illegal Command 













Data Field[15:0] 


The data field contains the message data to be communicated from the Debug Module to — 
the development system. The response message is always a single word, with the data field 
encoded as shown in Table 16-2. 
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16.3.2.2 TRANSMIT PACKET FORMAT. The basic transmit packet of information is 17 
bits long, 16 data bits plus a control bit, as shown below in Figure 16-5. 


Ue Ds ae OURO IE 
Figure 16-5. Transmit BDM Packet 


Control(16] 


The control bit is not used but is reserved by Motorola for future use. Command and data 
transfers initiated by the development system should clear bit 16. 


Data Field[15:0] 


The data field contains the message data to be communicated from the development 
system to the Debug Module. 


16.3.3 BDM Command Set 


ColdFire supports a subset of BDM instructions from the MC683xx parts, as well as 
extensions to provide access to new hardware features. The BDM commands must not be 
issued whenever the ColdFire processor is accessing the Debug Module registers using the 
WDEBUG instruction, or the resulting behaviour is undefined. 


16.3.3.1 BDM COMMAND SET SUMMARY. The BDM command set is summarized in 
Table 16-3. Subsequent paragraphs contain detailed descriptions of each command. 
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Table 16-3. BBM Command Summary 










































READ A/D REGISTER | RAREG/RDREG |Read the selected address or data registerand} HALTED | 16-14 
return the results via the serial interface. 
WRITE A/D REGISTER| WAREG/WDREG |The data operand is written to the specified HALTED 16-15 
address or data register. 
READ MEMORY READ Read the data at the memory location specified} STEAL 16-16 
LOCATION by the longword address. 
WRITE MEMORY WRITE Write the operand data to the memory location} STEAL 16-17 
LOCATION specified by the longword address. 
DUMP MEMORY DUMP Used in conjunction with the READ command} STEAL 16-19 
BLOCK to dump large blocks of memory. An initial 
READ Is executed to set up the starting 
address of the block and to retrieve the first 
result. Subsequent operands are retrieved with 
the DUMP command. 
FILL MEMORY BLOCK FILL Used in conjunction with the WRITE command} STEAL 16-21 
to fill large blocks of memory. An initial WRITE 
is executed to set up the starting address of the 
block and to supply the first operand. 
Subsequent operands are written with the FILL 
command. 
RESUME EXECUTION GO The pipeline is flushed and refilled before HALTED | 16-23 
eumning instruction execution at the current 
NO OPERATION NOP performs no operation and may be used| PARALLEL} 16-23 
as a null command. 
OUTPUTS THE SYNC_PC co the current PC and displays itonthe}PARALLEL| 16-24 
CURRENT PC PST/DDATA output pins. 
READ CONTROL RCREG Read the system control register. HALTED | 16-24 
REGISTER 
WRITE CONTROL WCREG Write the operand data to the system control | HALTED | 16-26 
REGISTER register. 
READ Beet Module RDMREG Read the Debug Module register. PARALLEL|} 16-26 
REGISTER 
WRITE DEBUG WDMREG Write the operand data to the Debug Module |PARALLEL| 16-27 
MODULE REGISTER register. 
NOTE: 1. General command effect and/or requirements on CPU operation: 





Halted - The CPU must be halted to perform this command 

Steal - Command generates bus cycles which can be interleaved with CPU accesses 
Parallel - Command is executed in parallel with CPU activity 

Refer to command summaries for detailed operation descriptions. 


16.3.3.2 COLDFIRE BDM COMMANDS. All ColdFire Family BDM commands include a 
16-bit operation word followed by an optional set of one or more extension words. 16 





15 10 9 8 7 6 5 4 3 2 0 
OPERATION [0 [Rw] ops [0 | 0 | AD] REGISTER 
EXTENSION WORD(S) 


BDM Command Format 


Operation Field 
The operation field specifies the command. 
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R/W Field 


The R/W field specifies the direction of operand transfer. When the bit is set, the transfer is 
from the CPU to the development system. When the bit is cleared, data is written to the CPU 
or to memory from the development system. . | 


Operand Size 


For sized operations, this field specifies the operand data size. All addresses are expressed 
as 32-bit absolute values. The size field is encoded as listed in Table 16-4. 


Table 16-4. BDM Size Field Encoding 


| ENCODING |OPERAND SIZE _ BIT VALUES 





Address / Data (A/D) Field 


The A/D field is used in commands that operate on address and data registers in the 
processor. It determines whether the register field specifies a data or address register. A one 
indicates an address register; zero, a data register. 


Register Field 


In commands that operate on processor registers, this field specifies which register is 
selected. The field value contains the register number. 


Extension Word(s) (as required): 


Certain commands require extension words for addresses and/or immediate data. 

Addresses require two extension words because only absolute long addressing is permitted. 
Immediate data can be either one or two words in length—byte and word data each require 
a single extension word; longword data requires two words. Both operands and addresses 
are transferred most significant word first. In the following descriptions of the BDM command 
set, the optional set of extension words is defined as “Address”, “Data” or “Operand Data.” | 


16.3.3.3 COMMAND SEQUENCE DIAGRAM. A command sequence diagram (see Figure 
16-6) illustrates the serial bus traffic for each command. Each bubble in the diagram 
represents a single 17-bit transfer across the bus. The top half in each bubble corresponds 
to the data transmitted by the development system to the Debug Module; the bottom half 
corresponds to the data returned by the Debug Module in response to the previous 
development system commands. Command and result transactions are overlapped to 
minimize latency. , 


The cycle in which the command is issued contains the development system command 
mnemonic (in this example, “read memory location”). During the same cycle, the Debug 
Module responds with either the low-order results of the previous command or a command 
complete status (if no results were required). | | | 


16-12 MCF5307 User’s Manual MOTOROLA 


DEBUG SUPPORT 


During the second cycle, the development system supplies the high-order 16 bits of the 
memory address. The Debug Module returns a “not ready” response unless the received 
command was decoded as unimplemented, in which case the response data is the illegal 
command encoding. If an illegal command response occurs, the development system 
should retransmit the command. 


NOTE 


The “not ready” response can be ignored unless a memory- 
referencing cycle is in progress. Otherwise, the Debug Module 
can accept a new Serial transfer after 32 processor clock 
periods. 


In the third cycle, the development system supplies the low-order 16 bits of a memory 
address. The Debug Module always returns the “not ready” response in this cycle. At the 
completion of the third cycle, the Debug Module initiates a memory read operation. Any 
serial transfers that begin while the memory access is in progress return the “not ready” 
response. 


Results are returned in the two serial transfer cycles following the completion of the memory 
access. The data transmitted to the Debug Module during the final transfer is the opcode for 
the following command. If a memory or register access is terminated with a bus error, the 
error status (S=1, DATA=$0001) is returned in place of the result data. 
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COMMANDS TRANSMITTED TO THE DEBUG MODULE : 
COMMAND CODE TRANSMITTED DURING THIS CYCLE 
| HIGH-ORDER 16 BITS OF MEMORY ADDRESS 
LOW-ORDER 16 BITS OF MEMORY ADDRESS 


NONSERIAL-RELATED ACTIVITY 


SEQUENCE TAKEN IF 


OPERATION HAS NOT 
COMPLETED 
NEXT 
READ COMMAND 
READ (LONG | MEMORY (—_XXX_\ J CODE 
ae ee, "NOT READY! FOCATION 


NX) NEXT CMD 


XXX (NEXT CMD 
7 BERR "NOT READY: 





DATA UNUSED FROM 
THIS TRANSFER | 
- SEQUENCE TAKEN IF BUS 
SEQUENCE TAKEN IF ERROR OCCURS ON 
ILLEGAL COMMAND . MEMORY ACCESS 


IS RECEIVED BY DEBUG MODULE ~ 


HIGH- AND LOW-ORDER 
RESULTS FROM PREVIOUS COMMAND 16 BITS OF RESULT 


RESPONSES FROM THE DEBUG MODULE 
Figure 16-6. Command Sequence Diagram 


16.3.3.4 COMMAND SET DESCRIPTIONS. The BDM command set is summarized in 
Table 16-3. Subsequent paragraphs contain detailed descriptions of each command. 


Note 


The BDM status bit (S) is zero for normally-completed 
commands, while illegal commands, “not ready” responses and 
bus-errored transfers return a logic one in the S bit. Refer to 
Section 16.3.2 BDM Serial Interface for information on the 
serial packet receive packet format 





Unassigned command opcodes are reserved by Motorola for future expansion. All unused 
command formats within any revision level performs a NOP and return the ILLEGAL 
command response: 


16.3.3.4.1 Read A/D Register (RAREG/RDREG). Read the selected address or data 


register and return the 32-bit result. A bus error response is returned if the CPU core is not 
halted. 
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Formats: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


RAREG/RDREG Command 


DATA [31:16] 





DATA [15:0] 


~~~” RAREG/RDREG Result 








Command Sequence: 


RAREG/RDREG (—__XXX_ (NEXT CMD 
AMS RESULT / LS RESULT 


(XXX (NEXT CMD 
BERR ‘NOT READY? 


Operand Data: 
None 


Result Data: 
The contents of the selected register are returned as a longword value. The data is returned 
most significant word first. 


16.3.3.4.2 Write A/D Register (WAREG/WDREG). The operand longword data is written 
to the specified address or data register. All 32 register bits are altered by the write. A bus 
error response is returned if the CPU core is not halted. 


Command Formats: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
Comes—~—~iYSC“‘“S*S*SSCSC“‘(CSCLSSCOC“(N#N#SSONTC*‘“dS;=«A® [REGISTER 
DATA [31:16] 








DATA [15:0] 
WAREG/WDREG Command 
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Command Sequence: 


WDREG/WAREG (MSDATA, — (“LSDATA NEXT CMD 
"NOT READY: "NOT READY: “CMD COMPLETE" 


(XXX NEXT CMD 
BERR ‘NOT READY: 


Operand Data: 


Longword data is written into the specified address or data register. The data is supplied 
most significant word first. | 


Result Data: 


Command complete status is indicated by returning the data $FFFF (with the status bit 
cleared) when the register write is complete. 


16.3.3.4.3 Read Memory Location (READ). Read the operand data from the memory 
location specified by the longword address. The address space is defined by the contents 
of the low-order 5 bits {TT, TM} of the BDM Address Attribute Register (BAAR). The 
hardware forces the low-order bits of the address to zeros for word and longword accesses 
to ensure that operands are always accessed on natural boundaries: words on 0-modulo-2 
addresses, longwords on 0-modulo-4 addresses. 


Formats: 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
Pie euteie aM ek aM ey 2 Sea OO eae A lls ones ee Oa See a OL eee 


Byte READ Command 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 





Byte READ Result 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
$1 PO “Se 
Word READ Command 


16-16 MCF5307 User’s Manual MOTOROLA 


DEBUG SUPPORT 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


Word READ Result 


15 14 13 12 11 10 9 8 7 6 5 4 3 
$1 es $0 

ADDRESS [31:16] 

ADDRESS [15:0] 


Long READ Command 


NO 
—_ 
oO 





15 14 13 12 11 10 9 8 7 6 5 4 3 


DATA [31:16] 
DATA [15:0] 


Long READ Result 


nN 
=k 
=) 





Command Sequence: 




















READ 
MEMORY 
LOCATION 





MS ADDR 
‘NOT READY? 


LS ADDR 
‘NOT READY, 





(~_XXX__ 
BERR "NOT READY: 


















READ (LONG MS ADDR LS ADDR Fiseen 
a a, "NOT READY: "NOT READY: cOGiiGh 


(XXX) NEXTCMD 
NWS RESULTY ~~ ALS RESULT / 
(XXX NEXT. CMD 


BERR “NOT READY, 


Operand Data: | 16 


The single operand is the longword address of the requested memory location. 


Result Data: 


The requested data is returned as either a word or longword. Byte data is returned in the 
least significant byte of a word result, with the upper byte undefined. Word results return 16 
bits of significant data; longword results return 32 bits. A value of $0001 (with the status bit 
set) is returned if a bus error occurs. 


16.3.3.4.4 Write Memory Location (WRITE). Write the operand data to the memory 
location specified by the longword address. The address space is defined by the contents 
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of the low-order 5 bits {TT, TM} of the BDM Address Attribute Register (BAAR). The 
hardware forces the low-order bits of the address to zeros for word and longword accesses 
to ensure that operands are always accessed on natural boundaries: words on 0-modulo-2 
addresses, longwords on 0-modulo-4 addresses. 


Formats: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0. 
_oaTSC~sSC“‘CS;SUCUdUUTC~CSOSC“‘“LNNNNSC#C#‘#SNSCSC“‘C 













ADDRESS [31:16] 


ADDRESS [15:0] 
DATA [15:0] 


Ee PN Oe ee 





15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


eee oe Oe a Oe 
0) 










Long WRITE Command | 
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Command Sequence: 
















WRITE 
MEMORY 
LOCATION 


(WRITE (BAW) \ MS ADDR LS ADDR (DATA 
9272, "NOT READY: "NOT READY: "NOT READY: 


(~_XXX_ 
"NOT READY! 
NEXT CMD 


<CMD COMPLETE? 


(XXX 
BERR 
(NEXT CMD 
"NOT READY! 







(~ MS DATA 
"NOT READY: 











iets (XxX 
3 7 vocation 
NOT READY LOCATION NOT READY 


NEXT CMD 
“CMD COMPLETE? 


BERR 


(~ NEXT CMD 
‘NOT READY: 


Operand Data: 


Two operands are required for this instruction. The first operand is a longword absolute 
address that specifies a location to which the operand data is to be written. The second 
operand is the data. Byte data is transmitted as a 16-bit word, justified in the least significant 
byte; 16- and 32-bit operands are transmitted as 16 and 32 bits, respectively. 


Result Data: 


Command complete status is indicated by returning the data $FFFF (with the status bit 
cleared) when the register write is complete. A value of $0001 (with the status bit set) is 
returned if a bus error occurs. 


16.3.3.4.5 Dump Memory Block (DUMP). DUMP is used in conjunction with the READ 
command to access large blocks of memory. An initial READ is executed to set up the 
starting address of the block and to retrieve the first result. The DUMP command retrieves 
subsequent operands. The initial address is incremented by the operand size (1, 2, or 4) and 
saved in a temporary register. Subsequent DUMP commands use this address, perform the 
memory read, increment it by the current operand size, and store the updated address in 
the temporary register. 
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NOTE 


The DUMP command does not check for a valid address — 
DUMP is a valid command only when preceded by another 
DUMP, NOP or by a READ command. Otherwise, an illegal 
command response is returned. The NOP command can be 
used for intercommand padding without corrupting the address 
pointer. 


The size field is examined each time a DUMP command is processed, allowing the operand 
size to be dynamically altered. 


Command Formats 

15 14 138 12 ~ #«11 10 9 8 7 6 5 4 3 2 1 0 

ec ene Slag en OO ee el 
Byte DUMP Command 

15 14 13 12 #11 10 9 8 7 6 5 4 3 2 1 0 


Byte DUMP Result 


15 14 #=~13 #12 «° 11 #1 9 8 7 6 5 4 3 2 1 0 
ae > ee Sees eee 
Word DUMP Command | 


7 
—_k 


15 14 #13 12 ~ «(11 10 9 8 7 6 5 4 3 2 1 0 
DATA [15:0] 


Word DUMP Result 


15 14 13 #12 «11 «10 ~~ 9 8 7 6 5 4 3 2 1 0 
1 PO 
Long DUMP Command 


7 


15 14 13 #12 «141 10 9 8 7 6 5 4 3 2 1 0 
DATA [31:16] 
DATA [15:0] 


Long DUMP Result 


16-20 MCF5307 User’s Manual MOTOROLA 


DEBUG SUPPORT 


Command Sequence: 












READ 
MEMORY 
LOCATION 


NEXT CMD 
"ILLEGAL" "NOT READY" 


READ 
MEMORY 
LOCATION 


NEXT CMD 
"ILLEGAL" "NOT READY" 


DUMP (B/W 


“NOT READY" 


NEXT CMD 
RESULT 





NEXT CMD 
"NOT READY? 









DUMP (LONG 
ae ee, 


2 







“NOT READY" 





NEXT CMD NEXT CMD 
MS RESULT LS RESULT 





NEXT CMD 
"NOT READY? 


Operand Data: 
None 


Result Data: 


Requested data is returned as either a word or longword. Byte data is returned in the least 
significant byte of a word result. Word results return 16 bits of significant data; longword 
results return 32 bits. A value of $0001 (with the status bit set) is returned if a bus error 
occurs. 


16.3.3.4.6 Fill Memory Block (FILL). FILL is used in conjunction with the WRITE 
command to access large blocks of memory. An initial WRITE is executed to set up the 
starting address of the block and to supply the first operand. The FILL command writes 
subsequent operands. The initial address is incremented by the operand size (1, 2, or 4) and 
saved in a temporary register after the memory write. Subsequent FILL commands use this 
address, perform the write, increment it by the current operand size, and store the updated 
address in the temporary register. 


NOTE 


The FILL command does not check for a valid address —FILL is 
a valid command only when preceded by another FILL, NOP or 
by a WRITE command. Otherwise, an_ illegal command 
response is returned. The NOP command can be used for 
intercommand padding without corrupting the address pointer. 


The size field is examined each time a FILL command is processed, allowing the operand 
size to be altered dynamically. 
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Formats: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


a a aS eg Ne Ne ee ee 












DATA [15:0] 
Word FILL Command 





DATA [31:16] 
DATA [15:0] 


Long FILL Command 





Command Sequence: 


( FILL(BWW) \ MS DATA LS DATA 
"NOT READY" "NOT READY" 
NEXT CMD 
"ILLEGAL" "NOT READY" 






WRITE 
MEMORY 
LOCATION 






"NOT READY" 


NEXT CMD 
SCMD COMPLETE? 







NEXT CMD 

















WRITE 
MEMORY 
LOCATION 


NEXT CMD 
“NOT READY? 









‘NOT READY" 


NEXT CMD 
\CMD COMPLETE? 


FILL (LONG 


DATA 


"NOT READY* 


"ILLEGAL" 





















NEXT CMD 
"NOT READY? 


Operand Data: 


A single operand is data to be written to the memory location. Byte data is transmitted as a 
16-bit word, justified in the least significant byte; 16- and 32-bit operands are transmitted as 
16 and 32 bits, respectively. 
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Result Data: 

Command complete status is indicated by returning the data $F FFF (with the status bit 
cleared) when the register write is complete. A value of $0001 (with the status bit set) is | 
returned if a bus error occurs. : 


16.3.3.4.7 Resume Execution (GO). The pipeline is flushed and refilled before resuming 
normal instruction execution. Prefetching begins at the current ec and current privilege level. 
If any register (e.g., the PC or sr) was altered by a BDM command while halted, the updated 
value is used as the prefetching resumes. 


Formats: 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
a | a ae 2 es ee Can: | nr, 


GO Command 


Command Sequence: 
“CMD COMPLETE" 


Operand Data: 
None 


Result Data: 
The “command complete” response ($O0FFFF) is returned during the next shift operation. 


16.3.3.4.8 No Operation (NOP). NOP performs no operation and may be used as a null 
command where required. 


Formats: 
15 12 11 8 7 4 3 0 





NOP Command 


Command Sequence: 


(NOP _\  (/_NEXTCMD _\ 
222 J” XCMD COMPLETE? 
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Operand Data: 
None 


Result Data: 


The “command complete” response, $FFFF (with the status bit cleared), is returned during 
the next shift operation. 


16.3.3.4.9 Synchronize PC to the PST/DDATA Lines(SYNC_PC). Capture the current 
PC and display it on the PST/DDATA outputs. After the Debug Module receives the 
commana, it sends a signal to the ColdFire processor that the current PC must be displayed. 
The processor then forces an instruction fetch at the next PC with the address being 
captured in the DDATA logic under control of the BTB bits of the CSR (CSR [9:8]). The 
specific sequence of PST and DDATA values is defined below : 


Debug signals a SYNC_PC command is pending. CPU completes the current instruction. 
CPU forces an instruction fetch to the next PC, generates a PST = $5 value indicating a 
“taken branch” and signals DDATA. DDATA captures the instruction address corresponding 
to the PC. DDATA generates a PST marker ($9 - $B) as defined by CSR. BTB and displays 
the captured PC address. 


This command can be used to dynamically access the PC for performance monitoring. The 


execution of this command is considerably less obtrusive to the real-time operation of an 
application than a “halt-CPU/read-PC/resume” command sequence. 


Format: 


Command Sequence: 


{NOP (~_NEXTCMD 
\ 277) “CMD COMPLETE! 


Operand Data: 
None 


Result Data: 


The "command complete" response, $FFFF (with the status bit cleared), is returned during 
the next shift operation. | 


16.3.3.4.10 Read Control Register (RCREG). Read the selected control register and 
return the 32-bit result. Accesses to the processor/memory control registers are always 32 
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bits in size, regardless of the implemented register width. The second and third words of the 
command effectively form a 32-bit address used by the Debug Module to generate a special 
bus cycle to access the specified control register. The 12-bit Re field is the same as that 
used by the MOVEC instruction. 





Formats: 





RCREG Command 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
DATA [31:16] 
DATA [15:0] 


RCREG Result 


Re encoding: 


Table 16-5. Control Register Map 


Ro | _SREGISTERDEFINITION, 


MAC Mask Register (MASK)t 
MAC Accumulator (ACC)t 
Status Register (SR) 


Program Register (PC) 
$C00 ROM Base Address Register (ROMBAR) 


$C04 RAM Base Address Register (RAMBAR) 
NOTE: tAvailable if the optional MAC unit is present. 



















HA 
ol 






HR 
ok 






fF 
RR 






HF 






fA 









HR 






FR 










Command Sequence: 





READ 
MEMORY 
LOCATION 






(EXT WORD 
"NOT READY: 





(~ NEXT CMD) 
BERR "NOT READY: 


Operand Data: 
The single operand is the 32-bit Rc control register select field. 
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Result Data: 


The contents of the selected control register are returned as a longword value. The data is 
returned most significant word first. For those control registers with widths less than 32 bits, 
only the implemented portion of the register is guaranteed to be correct. The remaining bits 
of the longword are undefined. 


16.3.3.4.11 Write Control Register (WCREG). The operand (longword) data is written to 
the specified control register. The write alters all 32 register bits. 


Formats: 


DATA [31:16] 
DATA [15:0] 


WCREG Command 





Command Sequence: 





(“EXT WORD 
"NOT READY: 






(~ MS DATA \ 
‘NOT READY: 





(“EXT WORD 
"NOT READY! 


WRITE 
( \SDATA \ ee. Te. 
"NOT READY! ACN "NOT READY: 


NEXT CMD 
CMD COMPLETE? 





Operand Data: 


Two operands are required for this instruction. The first long operand selects the register to 
which the operand data is to be written. The second operand is the data. 


Result Data: 


Successful write operations return a $FFFF. Bus errors on the write cycle are indicated by 
the assertion of bit 16 in the status message and by a data pattern of $0001. 


16.3.3.4.12 Read Debug Module Register (RDMREG). Read the selected Debug Module 
register and return the 32-bit result. The only valid register selection for the RDMREG 
command is the csr (DRe = $0). 
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Command Formats: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


RDMREG BDM Command 





15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
DATA [31:16] 
DATA [15:0] 


RDMREG BDM Result 





DRe encoding: 
Table 16-6. Definition of DRc Encoding - Read 


besten] | __ DEBUG REGISTER DEFINITION DEBUG REGISTER DEFINITION MNEMONIC | INITIAL STATE 






[__Configuration/Status_ «dT ~~=CSASSC«d SSCS 
i oe Rees eee! ReneS Da 





Command Sequence: 


(“RDMREG XXX NN NEXT CMD 


(—__XXX__\ (NEXT CMD 
K "ILLEGAL" / “NOT READY: 


Operand Data: 
None 


Result Data: 


The contents of the selected debug register are returned as a longword value. The data is 
returned most significant word first. 


16.3.3.4.13 Write Debug Module Register (WDMREG). The operand (longword) data is 
written to the specified Debug Module register. All 32 bits of the register are altered by the, 

write. The pscik signal must be inactive while debug module register writes from the CPU 
accesses are performed using the WDEBUG instruction. 





Command Format: 


15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 


WDMREG BDM Command 
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DRc encoding: 
Table 16-7. Definition of DRc Encoding - Write 


DEBUG REGISTER DEFINITION | 


Configuration/Status 


INITIAL STATE 











CSR 


| DRo[3:0] 

| $0) | SCConfiguration/Status a ae 

ie ae 

ia eee 
$F es 


| $F Data Breakpoint Mask DBMR 


Command Sequence: 


















WDMREG NEXT CMD 
"NOT READY: "CMD COMPLETE" 
(—_XXX_ (NEXT CMD 
K ILLEGAL" "NOT READY" 


Operand Data: 


Longword data is written into the specified debug register. The data is supplied most 
significant word first. 


Result Data: 
Command complete status (SOFFFF) is returned when register write is complete. 


16.3.3.4.14 Unassigned Opcodes. Unassigned command opcodes are reserved by 
Motorola. All unused command formats within any revision level performs a NOP and return 
the ILLEGAL command response. 


16.4 REAL-TIME DEBUG SUPPORT 


The ColdFire Family provides support for the debug of real-time applications. For these 
types of embedded systems, the processor cannot be halted during debug, but must 
continue to operate. The foundation of this area of debug support is that while the processor 
cannot be halted to allow debugging, the system can generally tolerate small intrusions into 
the real-time operation. 


The Debug Module provides a number of hardware resources to support various hardware 
breakpoint functions. Specifically, three types of breakpoints are supported: PC with mask, 
operand address range, and data with mask. These three basic breakpoints can be 
configured into one- or two-level triggers with the exact trigger response also 
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programmable. The Debug Module programming model is accessible from either the 
external development system using the serial interface or from the processor’s supervisor 
programming model using the WDEBUG instruction. 


16.4.1 Theory of Operation 


The breakpoint hardware can be configured to respond to triggers in several ways. The 
desired response is programmed into the Trigger Definition Register. In all situations where 
a breakpoint triggers, an indication is provided on the ppata output port, when not displaying 
captured operands or branch addresses, as shown in Table 16-8. 


Table 16-8. DDATA[3:0], CSR[31:28] Breakpoint Response 


101% 









The breakpoint status is also posted in the csr. 


The BDM instructions load and configure the desired breakpoints using the appropriate 
registers. As the system operates, a breakpoint trigger generates a response as defined in 
the tor. If the system can tolerate the processor being halted, a BDM-entry can be used. 
With the TRC bits of the TDR equal to $1, the breakpoint trigger causes the core to halt as 
reflected in the pst = $F status. For pc breakpoints, the halt occurs before the targeted 
instruction is executed. For address and data breakpoints, the processor may have 
executed several additional instructions. As a result, trigger reporting is considered 
imprecise. 


If the processor core cannot be halted, the special debug interrupt can be used. With this 
configuration, TRC bits of the tor equal to $2, the breakpoint trigger is converted into a 
debug interrupt to the processor. This interrupt is treated higher than the nonmaskable level 
7 interrupt request. As with all interrupts, it is made pending until the processor reaches a 
sample point, which occurs once per instruction. Again, the hardware forces the pc 
breakpoint to occur immediately (before the execution of the targeted instruction). This is 
possible because the PC breakpoint comparison is enabled at the same time the interrupt 
sampling occurs. For the address and data breakpoints, the reporting is considered 
imprecise because several additional instructions may be executed after the triggering 
address or data is seen. 


Once the debug interrupt is recognized, the processor aborts execution and initiates 
exception processing. At the initiation of the exception processing, the core enters emulator 
mode. After the standard 8-byte exception stack is created, the processor fetches a unique 
exception vector, 12, from the vector table (Refer to the ColdFire Family Programmer's 
Reference Manual Rev 1.0 MCF5200PRM/AD). 
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Execution continues at the instruction address contained in this exception vector. All 
interrupts are ignored while in emulator mode. You can program the debug-interrupt handler 
to perform the necessary context saves using the supervisor instruction set. As an example, 
this handler may save the state of all the program-visible registers as well as the current 
context into a reserved memory area. 


Once the required operations are completed, the return-from-exception (RTE) instruction is 
executed and the processor exits emulator mode. Once the debug interrupt handler has 
completed its execution, the external development system can then access the reserved 
memory locations using the BDM commands to read memory. 


In the Rev. A implementation, if a hardware breakpoint (e.g., a PC trigger) is left unmodified 
by the debug interrupt service routine, another debug interrupt is generated after the RTE 
instruction completes execution. In the Rev. B design, the hardware has been modified to 
inhibit the generation of another debug interrupt during the first instruction after the RTE 
exits emulator mode. This behaviour is consistent with the existing logic involving trace 
mode, where the execution of the first instruction occurs before another trace exception is 
generated. This Rev. B enhancement disables all hardware breakpoints until the first 
instruction after the RTE has completed execution, regardless of the programmed trigger 
response. 


16.4.1.1 EMULATOR MODE. Emulator mode is used to facilitate non-intrusive emulator 
functionality. This mode can be entered in three different ways: 


e The EMU bit in the csr may be programmed to force the ColdFire processor to begin 
execution in emulator mode. This bit is only examined when RSTI is negated and the 
processor begins reset exception processing. It may be set while the processor is 
halted before the reset exception processing begins. Refer to Section 16.3.1 CPU Halt. 


e A debug interrupt always enters emulation mode when the debug interrupt exception 
processing begins. 





e The TCR bit in the csR may be programmed to force the processor into emulation mode 
when trace exception processing begins. 


During emulation mode, the ColdFire processor exhibits the following properties: 
e All interrupts are ignored, including level seven. 
| 16 e lf the MAP bit of the csr is set, all memory accesses are forced into a specially mapped 
address space signalled by TT = $2, TM = $5 or $6. This includes the stack frame writes 
and the vector fetch for the exception which forced entry into this mode. 





e Ifthe MAP bit in the csr is set, all caching of memory accesses Is disabled. Additionally, 
the SRAM module is disabled while in this mode. 


The return-from-exception (RTE) instruction exits emulation mode. The processor status 
output port provides a unique encoding for emulator mode entry ($D) and exit ($7). 


16.4.1.2 DEBUG MODULE HARDWARE. 
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16.4.1.2.1 Reuse of Debug Module Hardware (Rev. A). The Debug Module 
implementation provides a common hardware structure for both BDM and breakpoint 
functionality. Several structures are used for both BDM and breakpoint purposes. Table 16- 
9 identifies the shared hardware structures. 


Table 16-9. Shared BDM/Breakpoint Hardware 
| REGISTER BDM FUNCTION BREAKPOINT FUNCTION 
ATR | Bus Attributes for AllMemory— Memory | Attributes for Address. 
Commands Breakpoint 
ABHR Address for All Memory Commands Address for Address 
Breakpoint 
Data for All BDM Write Commands Data for Data Breakpoint 


The shared use of these hardware structures means the loading of the register to perform 
any specified function is destructive to the shared function. For example, if an operand 
address breakpoint is loaded into the Debug Module, a BDM command to access memory 
overwrites the breakpoint. If a data breakpoint is configured, a BDM write command 
overwrites the breakpoint contents. 







16.4.1.2.2 The New Debug Module Hardware (Rev. B). The new Debug Module 
implementation has added hardware registers so that there are no restrictions concerning 
the interaction between BDM commands and the use of the hardware breakpoint logic. In 
some cases, the additional hardware is not program-visible, while in other cases, there have 
been extensions to the Debug Module programming model. As example, consider the 
following two registers: 


The hardware register containing the BDM memory address is nota program-visible 
resource. Rather, it is a hardware register loaded automatically during the execution of a 
BDM commands. In the Rev B design, the execution of a BDM command does not affect 
the hardware breakpoint logic unless those registers are specifically accessed. 


The other register added to the Debug Module programming model is the BDM Address 
Attribute Register (BAAR). It is mapped to an DRc[3:0] address of $5. This 8-bit register is 
equivalent in the format of the low-order byte of the AATR register (Refer to section15.4.2.7). 
This register specifies the memory space attributes associated with all BDM memory- 
referencing commands. 


16.4.2 Programming Model 


In addition to the existing BDM commands that provide access to the processor's registers 
and the memory subsystem, the Debug Module contains nine registers to support the 
required functionality. All of these registers are treated as 32-bit quantities, regardless of the 
actual number of bits in the implementation. The registers, known as the debug control 
registers, are accessed through the BDM port using two new BDM commands: wowrec and 
RDMREG. These commands contain a 4-bit field, DRc, which specifies the particular register 
being accessed. 
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These registers are also accessible from the processor’s supervisor programming model 
through the execution of the WDEBUG instruction. Thus, the breakpoint hardware within the 
Debug Module may be accessed by the external development system using the serial 
interface, or by the operating system running on the processor core. It is the responsibility 
of the software to guarantee that all accesses to these resources are serialized and logically 
consistent. The hardware provides a locking mechanism in the CSR to allow the external 
development system to disable any attempted writes by the processor to the breakpoint 
registers (setting IPW = 1). The BDM commands must not be issued if the ColdFire 
processor is accessing the Debug Module registers using the WDEBUG instruction. 


Figure 16-7 illustrates the Debug Module programming model. 


31 15 0 
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Figure 16-7. Debug Programming Model. 


16.4.2.1 ADDRESS BREAKPOINT REGISTERS (ABLR, ABHR). The address 
breakpoint registers define a region in the operand address space of the processor that can 
be used as part of the trigger. The full 32-bits of the ABLR and ABHR values are compared 
with the address for all transfers on the processor’s high-speed local bus. The trigger 
definition register (tor) determines if the trigger is the inclusive range bound by ABLR and 
ABHR,, all addresses outside this range, or the address in ABLR only. The ABHR is 
accessible in supervisor mode as debug control register $C using the WDEBUG instruction 
and via the BDM port using the RDMREG and WDMREG commands. The ABLR is 
accessible in supervisor mode as debug control register $D using the WDEBUG instruction 
and via the BDM port using the WOMREG commands. The ABHR is overwritten by the BDM 
hardware when accessing memory as described in Section 16.4.1.2 Debug Module 
Hardware. | 
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ADDRESS 


Address Breakpoint Low Register (ABLR) 









Field Definition: 


ADDRESSJ[31:0]—Low Address 

This field contains the 32-bit address which marks the lower bound of the address 
breakpoint range. Additionally, if a breakpoint on a specific adrdess ts required, the value is 
programmed into the ABLR. 







ADDRESS 


Address Breakpoint High Register (ABHR) 







Field Definition: 


ADDRESS[31:0]—High Address 


This field contains the 32-bit address which marks the upper bound of the address 
breakpoint range. 


16.4.2.2 ADDRESS ATTRIBUTE TRIGGER REGISTER (AATR). The AATR defines the 

address attributes and a mask to be matched in the trigger. The AATR value is compared 

with the address attribute signals from the processor’s local high-speed bus, as defined by 
the setting of the tor. The AATR is accessible in supervisor mode as debug control register 
$6 using the WDEBUG instruction and via the BDM port using the WOMREG command. The 
lower five bits of the AATR are also used for BDM command definition to define the address 
space for memory references as described in Section 16.4.1.2 Debug Module Hardware. 








Address Attribute Trigger Register (AATR) 
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Field Definitions: 


RM[15|—Read/Write Mask 


This field corresponds to the R-field. Setting this bit causes R to be ignored in address 
comparisons. 


SZM[14:13]-Size Mask 


This field corresponds to the SZ field. Setting a bit in this field causes the corresponding bit 
in SZ to be ignored in address comparisons. 


TTM[12:11]—Transfer Type Mask 


This field corresponds to the TT field. Setting a bit in this field causes the corresponding bit 
in TT to be ignored in address comparisons. 


TMM[10:8]—Transfer Modifier Mask 


This field corresponds to the TM field. Setting a bit in this field causes the corresponding bit 
in TM to be ignored in address comparisons. 


R[7|-Read/Write 
This field is compared with the R/W signal of the processor’s local bus. 


SZ([6:5|—Size 


This field is compared to the size signals of the pracessor s local bus. These signals indicate 
the data size for the bus transfer. 


00 = Longword 
01 = Byte 
10 = Word 
11 = Reserved 


TT[4:3]—Transfer Type | : 
This field is compared with the transfer type signals of the processor's local bus. These 


signals indicate the transfer type for the bus transfer. These signals are always encoded as 
if the ColdFire 53xx is in the ColdFire IACK mode. 


00 = Normal Processor Access 

O01 = Reserved 

10 = Emulator Mode Access 

11 = Acknowledge/CPU Space Access 


These bits also define the TT encoding for BDM memory commands. In this case, the 01 
encoding generates an alternate master access (For backward compatibility). 


TM[2:0]—Transfer Modifier 


This field is compared with the transfer modifier signals of the processor's local bus. These 
signals provide supplemental information for each transfer type. These signals are always 
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encoded as if the processor is operating in the ColdFire IACK mode. The encoding for 
normal processor transfers (TT = 0) is: 


000 = Explicit Cache Line Push 
001 = User Data Access 

010 = User Code Access 

011 = Reserved 

100 = Reserved 

101 = Supervisor Data Access 

110 = Supervisor Code Access 
111 = Reserved 


The encoding for emulator mode transfers (TT = 10) is: 


Oxx = Reserved 
100 = Reserved 
101 = Emulator Mode Data Access 
110 = Emulator Mode Code Access 
111 = Reserved 


The encoding for acknowledge/CPU space transfers (TT = 11) is: 


000 = CPU Space Access 

001 = Interrupt Acknowledge Level 1 
010 = Interrupt Acknowledge Level 2 
011 = Interrupt Acknowledge Level 3 
100 = Interrupt Acknowledge Level 4 
101 = Interrupt Acknowledge Level 5 
110 = Interrupt Acknowledge Level 6 
111 = Interrupt Acknowledge Level 7 


These bits also define the TM encoding for BDM memory commands (For backward 
compatibility). 


16.4.2.3 PROGRAM COUNTER BREAKPOINT REGISTER (PBR, PBMR). The PC 
breakpoint registers define a region in the code address space of the processor that can be 
used as part of the trigger. The PBR value is masked by the PBMR value, allowing only 
those bits in PBR that have a corresponding zero in PBMR to be compared with the 
processor’s program counter register, as defined in the tor. The PBR is accessible in 
supervisor mode as debug control register $8 using the WDEBUG instruction and via the 
BDM port using the RDMREG and WOMREG commands. The PBMR is accessible in 
supervisor mode as debug control register $9 using the WDEBUG instruction and via the 
BDM port using the WOMREG command. 
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ADDRESS 


Program Counter Breakpoint Register (PBR) 


Field Definition: 


ADDRESSJ[31:0]—-PC Breakpoint Address 
This field contains the 32-bit address to be compared with the PC as a breakpoint trigger. 





Program Counter Breakpoint Mask Register (PBMR) 


Field Definition: 


MASK[31:0]-PC Breakpoint Mask 


This field contains the 32-bit mask for the PC breakpoint trigger. A zero in a bit position 
Causes the corresponding bit in the PBR to be compared to the appropriate bit of the PC. A 
one causes that bit to be ignored. 


16.4.2.4 DATA BREAKPOINT REGISTER (DBR, DBMR). The data breakpoint registers 
define a specific data pattern that can be used as part of the trigger into debug mode. The 
DBR value is masked by the DBMR value, allowing only those bits in DBR that have a 
corresponding zero in DBMR to be compared with the data value from the processor's local 
bus, as defined in the tor. The DBR is accessible in supervisor mode as debug control 
register $E using the WDEBUG instruction and via the BDM port using the RDMREG and 
WDMREG commands. The DBMR is accessible in supervisor mode as debug control 
register $F using the WDEBUG instruction and via the BDM port using the WOMREG 
command. The DBR is overwritten by the BDM hardware when accessing memory as 
described in Section 16.4.1.2 Debug Module nearewers: 


ADDRESS 





Data Breakpoint oon (DBR) 
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Field Definition: 


DATA[31:0]—Data Breakpoint Value 


This field contains the 32-bit value to be compared with the data value from the processor’s 
local bus as a breakpoint trigger. 





Data Breakpoint Mask Register (DBMR) 


Field Definition: 


MASK[31:0]—Data Breakpoint Mask 


This field contains the 32-bit mask for the data breakpoint trigger. A zero in a bit position 
causes the corresponding bit in the DBR to be compared to the appropriate bit of the internal 
data bus. A one causes that bit to be ignored. 


The data breakpoint register supports both aligned and misaligned references. The 
relationship between the processor address, the access size, and the corresponding 
location within the 32-bit data bus is shown in Table 16-10. 


Table 16-10. Access Size and Operand Data Location 


ee a ae ec 
eC Datal23.10 

a , 
ox Work Cais to) ———— 










16.4.2.5 TRIGGER DEFINITION REGISTER (TDR). The TDR configures the operation of 
the hardware breakpoint logic within the Debug Module and controls the actions taken under 

the defined conditions. The breakpoint logic may be configured as a one- or two-level 

trigger, where bits [31:16] of the TDR define the 2nd level trigger and bits [15:0] define the 

first level trigger. The TDR is accessible in supervisor mode as debug control register $7 

using the WDEBUG instruction and via the BDM port using the WOMREG command. 
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Trigger sca as an 


Field Definitions: 


TRC—Trigger Response Control 


The trigger response control determines how the processor is to respond to a completed 
trigger condition. The trigger response is always displayed on the ppata pins. 


00 = display on DDATA only 
= processor halt 

10 = debug interrupt 

11 = reserved 


LxT—Level-x Trigger | 


This is a Rev. B function. The Level-x Trigger bit determines the logic operation for the 
trigger between the PC_condition and the (Address_range & Data_condition) where the 
inclusion of a Data condition is optional. The ColdFire debug architecture supports the 
creation of single or double-level triggers. 


TDRI[15] 

O Level-2 trigger = PC_condition & Address_range & Data_condition 

1 Level-2 trigger = PC_condition | (Address_range & Data_condition) 
TDR{14] 

0  Level-1 trigger = PC_condition & Address_range & Data_condition 

1 Level-1 trigger = PC_condition | (Address_range & Data_condition) | 


EBL—Enable Breakpoint Level 


If set, this bit serves as the global enable for the breakpoint trigger. if cleared, all breakpoints 
are disabled. 


EDLW-—Enable Data Breakpoint for the Data Longword 


If set, this bit enables the data breakpoint based on the entire processor's local data bus. 
The assertion of any of the ED bits enables the data breakpoint. If all bits are cleared, the 
data breakpoint is disabled. 
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EDWL-—Enable Data Breakpoint for the Lower Data Word 


If set, this bit enables the data breakpoint based on the low-order word of the processor's 
local data bus. 


EDWU-Enable Data Breakpoint for the Upper Data Word 


If set, this bit enables the data breakpoint trigger based on the high-order word of the 
processor's local data bus. 


EDLL—Enable Data Breakpoint for the Lower Lower Data Byte 


If set, this bit enables the data breakpoint trigger based on the low-order byte of the low- 
order word of the processor's local data bus. 


EDLM—Enable Data Breakpoint for the Lower Middle Data Byte 


If set, this bit enables the data breakpoint trigger based on the high-order byte of the low- 
order word of the processor's local data bus. 


EDUM-—Enable Data Breakpoint for the Upper Middle Data Byte 


If set, this bit enables the data breakpoint trigger on the low-order byte of the high-order word 
of the processor’s local data bus. 


EDUU-—Enable Data Breakpoint for the Upper Upper Data Byte 


If set, this bit enables the data breakpoint trigger on the high-order byte of the high-order 
word of the processor's local data bus. 


Di—Data Breakpoint Invert 


This bit provides a mechanism to invert the logical sense of all the data breakpoint 
comparators. This can develop a trigger based on the occurrence of a data value not equal 
to the one programmed into the DBR. 


EAl—Enable Address Breakpoint Inverted 


If set, this bit enables the address breakpoint based outside the range defined by ABLR and 
ABHR. The assertion of any of the EA bits enables the address breakpoint. If all three bits 
are cleared, this breakpoint is disabled. 


EAR-—Enable Address Breakpoint Range 


If set, this bit enables the address breakpoint based on the inclusive range defined by ABLR 
and ABHR. 


EAL—Enable Address Breakpoint Low 
If set, this bit enables the address breakpoint based on the address contained in the ABLR. 


EPC—Enable PC Breakpoint 
If set, this bit enables the PC breakpoint. 
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PCI-PC Breakpoint Invert 


lf set, this bit allows execution outside a given region as defined by PBR and PBMR to 
enable a trigger.|f cleared, the PC breakpoint is defined within the region defined by PBR 
and PBMR. 


16.4.2.6 CONFIGURATION/STATUS REGISTER (CSR). The CSR defines the debug 
configuration for the processor and memory subsystem. In addition to defining the 
microprocessor configuration, this register also contains status information from the 
breakpoint logic. The CSR is cleared during system reset. The CSR can be read and written 
by the external development system and written by the supervisor programming model. The 
CSR is accessible in supervisor mode as debug control register $0 using the WOEBUG 
instruction and via the BDM port using the RDMREG and WODMREG commands. 


perf fe Po tape 





NOTE: +The CS 
port. 


D 


is a write only register from the programming model. It can be read from and written to via the BDM 


Configuration/Status Register (CSR) 


Field Definitions: 


STATUSJ[31:28]—Breakpoint Status 


This 4-bit field provides read-only status information concerning the hardware breakpoints. 
This field is defined as follows: 


000x = no breakpoints enabled 
001x = waiting for level 1 breakpoint 
010x = level 1 breakpoint triggered 
101x = waiting for level 2 breakpoint 
110x = level 2 breakpoint triggered 


The breakpoint status is also output on the DDATA port when it is not busy digpiaving other 
processor data. A write to the TDR resets this field. 


FOF[27]|—Fault-on-Fault 


lf this read-only status bit is set, a catastrophic halt has occurred and forced entry into BDM. 
This bit is cleared on a read from the CSR. 
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TRG[26]—Hardware Breakpoint Trigger 


If this read-only status bit is set, a hardware breakpoint has halted the processor core and 
forced entry into BDM. This bit is cleared by reading CSR. 


HALT[25]—Processor Halt 


If this read-only status bit is set, the processor has executed the HALT instruction and forced 
entry into BDM. This bit is cleared by reading the CSR. 


BKPT[24]-Breakpoint Assert 


If this read-only status bit is set, the BKPT signal was asserted, forcing the processor into 
BDM. This bit is cleared on a read from the CSR. 


HRL[23:20]-Hardware Revision Level 


This hardware revision level indicates the level of functionality implemented in the Debug 
Module. This information could be used by an emulator to identify the level of functionality 
supported. A zero value would indicate the initial debug functionality. For example, a value 
of 1 would represent Revision B while a value of O would represent the earlier release of 
Revision A. 


BKD[18]-Disable the Normal BKPT Input Signal Functionality 


This bit is used to disable the normal BKPT input signal functionality, and allow the assertion 
of this pin to generate a debug interrupt. If set, the assertion of the BKPT pin is treated as 
an edge-sensitive event. Specifically, a high-to-low edge on the BKPT pin generates a signal 
to the processor indicating a debug interrupt. The processor makes this interrupt request 
pending until the next sample point occurs. At that time, the debug interrupt exception is 
initiated. In the ColdFire architecture, the interrupt sample point occurs once per instruction. 
There is no support for any type of “nesting” of debug interrupts. 








PCD[17]-PSTCLK Disable 


If set, this bit disables the generation of the PSTCLK output signal, and forces this signal to 
remain quiescent. 


IPW[16]-Inhibit Processor Writes to Debug Registers 


If set, this bit inhibits any processor-initiated writes to the Debug Module’s programming 
model registers. This bit can only be modified by commands from the external development 
system. 


MAP[15]-Force Processor References in Emulator Mode 


If set, this bit forces the processor to map all references while in emulator mode to a special 
address space, TT = $2, TM = $5 or $6. If cleared, all emulator-mode references are 
mapped into supervisor code and data spaces. _ 


TRC[14]—Force Emulation Mode on Trace Exception 
If set, this bit forces the processor to enter emulator mode when a trace exception occurs. 
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EMU[13]—Force Emulation Mode 


If set, this bit forces the processor to pegin execution in emulator mode. Refer to Section | 
16.4.1.1 Emulator Mode. 7 


DDC[12:11]—-Debug Data Control 


This 2-bit field provides configuration control for capturing operand data for display on the 
ppata port. The encoding is: | 


00 = no operand data is displayed 

01 = capture all M-Bus write data 

10 = capture all M-Bus read data 

11 = capture all M-Bus read and write data 


In all cases, the DDATA port displays the number of bytes defined by the operand reference 
size, i.e., byte displays 8 bits, word displays 16 bits, and long displays 32 bits (one nibble at 
a time across multiple clock cycles.) Refer to Section 16.2.1.7 Begin Data Transfer (PST 


= $8 - $B). 


UHE[10]-User Halt Enable 
This bit selects the CPU privilege level required to execute the HALT instruction. 


O= HALT is a privileged, supervisor-only instruction 
A= HALT is a non-privileged, supervisor/user instruction 


BTB[9:8]—Branch Target Bytes 


This 2-bit field defines the number of bytes of branch target address to be displayed on the 
DDATA outputs. The encoding is 


00 = 0 bytes 

01 = lower two bytes of the target address 
10 = lower three bytes of the target address 
11 = entire four-byte target address 


Refer to Section 16.2.1.5 Begin Execution of Taken Branch (PST = $5). 


NPL[6]—Non-Pipelined Mode 


If set, this bit forces the processor core to operate in a nonpipeline mode of operation. In this 
mode, the processor effectively executes a single instruction at a time with no overlap. 


When operating in non-pipilined mode, performance is severely degraded. For the V3 
design, operation in this mode essentially adds 6 cycles to the execution time of each 
instruction. Given that the measured Effective Cycles per Instruction for V3 is ~2 cycles/ 
instruction, meaning performance in non-pipeline mode would be ~8 cycles/instruction, or 
approximately 25% compared to the pipelined performance. 


Regardless of the state of CSR[6], if a PC breakpoint is triggered, it is always reported 
before the instruction with the breakpoint is executed. The occurrence of an address and/or 
data breakpoint trigger is imprecise in normal pipeline operation. When operating in non- 
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pipeline mode, these triggers are always reported before the next instruction begins 
execution. In this mode, the trigger reporting can be considered to be precise. 


As previously discussed, the occurrence of an address and/or data breakpoint should 
always happen before the next instruction begins execution. Therefore the occurrence of the 
address/data breakpoints should be guaranteed. 


IP1[5]-Ignore Pending Interrupts 


If set, this bit forces the processor core to ignore any pending interrupt requests signalled 
while executing in single-instruction-step mode. 


SSM[4]-Single-Step Mode 

If set, this bit forces the processor core to operate in a single-instruction-step mode. While 
in this mode, the processor executes a single instruction and then halts. While halted, any 
of the BDM commands may be executed. On receipt of the GO command, the processor 
executes the next instruction and then halts again. This process continues until the single- 
instruction-step mode is disabled. 


16.4.2.7 BDM ADDRESS ATTRIBUTE (BAAR). TThe BAAR register defines the address 
space for memory-referencing BDM commands. Bits [7:5] are loaded directly from the BDM 
command, while the low-order 5 bits can be programmed from the external development 
system. To maintain compatibility with the Rev. A implementation, this register is loaded any 
time the AATR is written. The BAR is initialized to a value of $5, setting “supervisor data” as 
the default address space. 





Field Definitions: 


R[7]}-Read/Write 
0 = Write 
1 = Read 


SZ[6:5]}—Size 
00 = Longword 
01 = Byte 
10 = Word 
11 = Reserved 
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TT[4:3]—Transfer Type © 
See the TT definition in the AATR deceieien Section 16.4.2.2. 


TM([2:0]|—Transfer Modifier 
See the TM definition in the AATR description, Section 16.4.2.2. 


16.4.3 Concurrent BDM and Processor Operation 


The Debug Module supports concurrent operation of both the processor and most BDM — 
commands. BDM commands may be executed while the processor is running, except for 
the operations that access processor/memory registers: 


e Read/Write Address and Data Registers 
e Read/Write Control Registers 


For BDM commands that access memory, the Debug Module requests the processor's local 
bus. The processor responds by stalling the instruction fetch pipeline and then waiting until 
all current bus activity is complete. At that time, the processor relinquishes the local bus to 
allow the Debug Module to perform the required operation. After the conclusion of the Debug 
Module bus cycle, the processor reclaims ownership of the bus. 


The development system must use caution in configuring the breakpoint registers if the 
processor is executing. The Debug Module does not contain any hardware interlocks, so 
Motorola recommends that the tor be disabled while the breakpoint registers are being 
loaded. At the conclusion of this process, the TDR can be written to define the exact trigger. 
This approach guarantees that no spurious breakpoint triggers occur. 


Because there are no hardware interlocks in the debug unit, no BDM operations are allowed 
while the CPU is writing the debug’s registers (BKPTDSCLK must be inactive). 


16.4.4 Motorola-Recommended BDM Pinout 


The ColdFire BDM connector is a 26-pin Berg Connector arranged 2x13, shown in Figure 
16-8. 
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NOTES: 1. Supplied by target 


2. Pins reserved for BDM developer use. Contact developer. 
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Figure 16-8. Recommended BDM Connector 
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SECTION 17 
IEEE 1149.1 TEST ACCESS PORT (JTAG) 


The MCF5307 includes dedicated user-accessible test logic that is fully compliant with the 
IEEE standard 1149.1 Standard Test Access Port and Boundary Scan Architecture. Use the 
following description in conjunction with the supporting IEEE document listed above. This 
section includes the description of those chip-specific items that the IEEE standard requires 
as well as those items specific to the MCF5307 implementation. 


The MCF5307 JTAG test architecture implementation currently supports circuit board test 
strategies that are based on the IEEE standard. This architecture provides access to all of 
the data and chip control pins from the board edge connector through the standard four-pin 
test access port (TAP) and the active-low JTAG reset pin, TRST. The test logic itself uses a 
static design and is wholly independent of the system logic, except where the JTAG is 
subordinate to other complimentary test modes (see the Debug Support section for more 
information). When in subordinate mode, the JTAG test logic is placed in reset and the TAP 
pins can be used for other purposes in accordance with the rules and restrictions set forth 
using a JTAG compliance-enable pin. 





The MCF5307 JTAG implementation can: 


e Perform boundary-scan operations to test circuit board electrical continuity 
e Bypass the MCF5307 device by reducing the shift register path to a single cell 


e Sample the MCF5307 system pins during operation and transparently shift out the 
result 


Set the MCF5307 output drive pins to fixed logic values while reducing the shift register 
path to a single cell 


Protect the MCF5307 system output and input pins from backdriving and random 
toggling (such as during in-circuit testing) by placing all system signal pins to high- 
impedance state | 


NOTE 


The IEEE Standard 1149.1 test logic cannot be considered 
completely benign to those planning not to use JTAG capability. 
You must observe certain precautions to ensure that this logic 
does not interfere with system or debug operation. Refer to 
Section 17.6 Disabling the IEEE 1149.1 Standard Operation. 
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17.1 OVERVIEW 


Figure 17-1 is a block diagram of the MCF5307 implementation of the 1149.1 IEEE 
Standard. The test logic includes several test data registers, an instruction register, 
instruction register control decode, and a 16-state dedicated TAP controller. 


V+ 


TDI 


TDO 





3-BIT INSTRUCTION REGISTER 






V+ 






TAP. 
CONTROLLER 






TRST 





Figure 17-1. JTAG Test Logic Block Diagram 


17.2 JTAG SIGNAL DESCRIPTIONS 


The JTAG operation on the MCF5307 is enabled when MTMOD{3:0]= 0001. The external 
pin descriptions in Table 17-1 will now apply.Otherwise, the JTAG Test Access Port 
signals (TCK/TMS/TDI/TDO/TRST) are interpreted as the Debug port pins. 
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When the compliance-enable state is set for JTAG mode, apply. 


Table 17-1. JTAG Pin Descriptions 








PIN DESCRIPTION 

TCK A test clock input that synchronizes test logic operations 

TMS A test mode select input with a default internal pullup resistor that is sampled on the rising 
|edge of TCK to sequence the TAP controller 

TDI A serial test data input with a default internal pullup resistor that is sampled on the rising | 
edge of TCK 





TDO TA three-state test data output that is actively driven only in the Shift-IR and Shift-DR 
_|controller states and only updates on the falling edge of TCK 


TRST An active-low asynchronous reset with a default internal pullup resistor that forces the TAP 
controller into the test-logic-reset state. 














a 


17.2.1 Test Clock - (TCK) 


TCK is the dedicated JTAG test logic clock that is independent of the MCF5307 processor 
clock. Various JTAG operations occur on the rising or falling edge of TCK. The internal 
JTAG controller logic is designed such that holding TCK high or low for an indefinite period 
of time will not cause the JTAG test logic to lose state information. If TCK will not be used, 
it should be tied to ground. 


17.2.2 Test Reset/Development Serial Clock - (TRST/DSCLKk) 


The MTMOD[3:0] signals determine the function of this dual-purpose pin. If 
MTMOD[3:0]=0000, the DSCLK function is selected. If MTMOD[3:0]= 0001, the TRST 
function is selected. MTMODJ[3:0] should not be changed while RSTI = 1. When used as 
TRST, this pin will asynchronously reset the internal JTAG controller to the test logic reset 
state, causing the JTAG instruction register to choose the “idcode” command. When this 
occurs, all the JTAG logic is benign and will not interfere with the normal functionality of 
the MCF5307 processor. Although this signal is asynchronous, Motorola recommends 
that TRST make only a 0 to 1 (asserted to negated) transition while TMS is held at a logic 
1 value. TRST has an internal pullup so that if it is not driven low its value will default to a 
logic level of 1. However, if TRST will not be used, it can either be tied to ground or, if TCK 
is clocked, it can be tied to VDD. The former connection will place the JTAG controller in 
the test logic reset state immediately, while the later connection will cause the JTAG 
controller (if TMS is a logic 1) to eventually end up in the test logic reset state after 5 clocks 
of TCK. 


This pin is also used as the development serial clock (DSCLK) for the serial interface to a7 
17 


eee 











the Debug Module. The maximum frequency for the DSCLK signal is 1/2 the BCLKO 
frequency. See the Debug Support section for additional information on this signal. 


17.2.3 Test Mode Select/ Breakpoint (TMS/BKPT) 


The MTMODJ8:0] signals determine this pin’s dual function. If MTMODJ[8:0] =0000, the 
BKPT function is selected. If MTMOD[3:0] = 0001, then the TMS function is selected. 
MTMODJ3:0] should not change while RSTI = 1. When used as TMS, this input signal 
provides the JTAG controller with information to determine which test operation mode 
should be performed. The value of TMS and current state of the internal 16-state JTAG 
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controller state machine at the rising edge of TCK determine whether the JTAG controller 
holds its current state or advances to the next state. This directly controls whether JTAG 
data or instruction operations occur. TMS has an internal pullup so that if it is not driven 
low, its value will default to a logic level of 1. However, if TMS will not be used, it should be 
tied to VDD. This pin also signals a hardware breakpoint to the processor when in the 
debug mode. See the Debug Support section for additional information on this signai. 


17.2.4 Test Data Input/Development Serial Input - (TDI/DSI) 


This is a dual-function pin. If MTMODJ[38:0] = 0000, then DSI is selected. If MTMODJ[3:0] = 
0001, then TDI is selected. When used as TDI, this input signal provides the serial data 
port for loading the various JTAG shift registers composed of the boundary scan register, 
the bypass register, and the instruction register. Shifting in of data depends on the state 
of the JTAG controller state machine and the instruction currently in the instruction 
register. This data shift occurs on the rising edge of TCK. TDI also has an internal pullup 
so that if it is not driven low its value will default to a logic level of 1. However, if TDI will 
not be used, it should be tied to VDD. 


This pin also provides the single-bit communication for the debug module commands. 
see the Debug Support section for additional information on this signal. 


17.2.5 Test Data Output/Development Serial Output - (TDO/DSO) 


This is a dual-function pin. When MTMODJ3:0] = 0000, then DSO is selected. When 
MTMODJ[3:0] = 0001, TDO is selected. When used as TDO, this output signal provides 
the serial data port for outputting data from the JTAG logic. Shifting out of data depends 
on the state of the JTAG controller state machine and the instruction currently in the 
instruction register. This data shift occurs on the falling edge of TCK. When TDO is not 
outputting test data, it is three-stated. TDO can also be placed in three-state mode to allow 
bussed or parallel connections to other devices having JTAG. This signal also provides 
single-bit communication for the debug module responses. See the Debug Support 
section for additional information on this signal. 


17.3 JTAG REGISTER DESCRIPTIONS 


17.3.1 JTAG Instruction Shift Register 


The MCF5307 IEEE 1149.1 Standard implementation uses a 3-bit instruction-shift 
register without parity. This register transfers its value to a parallel hold register and 
applies one of six possible instructions on the falling edge of TCK when the TAP state 
machine is in the update-IR state. To load the instructions into the shift portion of the 
register, place the serial data on the TDI pin prior to each rising edge of TCK. The MSB 
of the instruction shift register is the bit closest to the TDI pin and the LSB is the bit closest 
to the TDO pin. 





Table 17-2 lists the public customer-usable instructions that are supported along with their 
encoding. 
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Table 17-2. JTAG Instructions 


INSTRUCTION class | IR[2:0] | INSTRUCTION SUMMARY 


EXTEST EXT Required Sorigas BS register while applying fixed values to output pins 
an 
asserting functional reset 
IDCODE Optional | 001 [Selects IDCODE register for shift 
SAMPLE/ SMP Required 100 Selects BS register for shift, sample, and preload without 
PRELOAD disturbing functional operation 
HIZ Optional 101 Selects the bypass register while three-stating all output pins 
ane and asserting functional reset 
CMP Optional 110 Selects bypass while applying fixed values to output pins and 
asserting functional reset 
P 


BYPASS Selects the bypass register for data operations 


The IEEE 1149.1 Standard requires the EXTEST, SAMPLE/PRELOAD, and BYPASS 
instructions. IDCODE, CLAMP and HIGHZ are optional standard instructions that the 
MCF5307 implementation supports and are described in the IEEE Standard 1149.1. 
















17.3.1.1 EXTEST INSTRUCTION. The external test instruction (EXTEST) selects the 
boundary-scan register. The EXTEST instruction forces all output pins and bidirectional 
pins configured as outputs to the preloaded fixed values (with the SAMPLE/PRELOAD 
instruction) and held in the boundary-scan update registers. The EXTEST instruction can 
also configure the direction of bidirectional pins and establish high-impedance states on 
some pins. The EXTEST instruction becomes active on the falling edge of TCK in the 
update-IR state when the data held in the instruction-shift register is equivalent to octal 0. 


17.3.1.2 IDCODE. The IDCODE instruction selects the 32-bit IDcode register for 
connection as a shift path between the TDI pin and the TDO pin. This instruction lets you 
interrogate the MCF5307 to determine its version number and other part identification 
data. The IDcode register has been implemented in accordance with IEEE 1149.1 so that 
the least significant bit of the shift register stage is set to logic 1 on the rising edge of TCK 
following entry into the capture-DR state. Therefore, the first bit to be shifted out after 
selecting the IDcode register is always a logic 1. The remaining 31-bits are also set to 
fixed values (see 17.3.2 IDcode Register) on the rising edge of TCK following entry into 
the capture-DR state. 


The IDCODE instruction is the default value placed in the instruction register when a 
JTAG reset is accomplished by either asserting TRST or holding TMS high while clocking 
TCK through at least five rising edges and the falling edge after the fifth rising edge. A 
JTAG reset will cause the TAP state machine to enter the test-logic-reset state (normal 
operation of the TAP state machine into the test-logic-reset state will also result in placing 
the default value of octal 1 into the instruction register). The shift register portion of the 
instruction register is loaded with the default value of octal 1 when in the Capture-IR state 
and a rising edge of TCK occurs. 





17.3.1.3  SAMPLE/PRELOAD INSTRUCTION. The SAMPLE/PRELOAD instruction 
provides two separate functions. First, it obtains a sample of the system data and control 
signals present at the MCF5307 input pins and just prior to the boundary scan cell at the 
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output pins. This sampling occurs on the rising edge of TCK in the capture-DR state when 
an instruction encoding of octal 4 is resident in the instruction register. You can observe 
this sampled data by shifting it through the boundary-scan register to the output TDO by 
using the shift-DR state. Both the data capture and the shift operation are transparent to 
system operation. You are responsible for providing some form of external 
synchronization to achieve meaningful results because there is no internal 
synchronization between TCK and the system clock, CLK. 


The second function of the SAMPLE/PRELOAD instruction is to initialize the boundary 
scan register update cells before selecting EXTEST or CLAMP. This is achieved by 
ignoring the data being shifted out of the TDO pin while shifting in initialization data. The 
update-DR state in conjunction with the falling edge of TCK can then transfer this data to 
the update cells. This data will be applied to the external output pins when one of the 
instructions listed above is applied. 


17.3.1.4 HIGHZ INSTRUCTION. The HIGHZ instruction anticipates the need to 
backdrive the output pins and protect the input pins from random toggling during circuit 
board testing. The HIGHZ instruction selects the bypass register, forcing all output and 
bidirectional pins to the high-impedance state. 


The HIGHZ instruction goes active on the falling edge of TCK in the update-IR state 
when the data held in the instruction shift register is equivalent to octal 5. 


17.3.1.5 CLAMP INSTRUCTION. The CLAMP instruction selects the bypass register 
and asserts functional reset while simultaneously forcing all output pins and bidirectional 
pins configured as outputs to the fixed values that are preloaded and held in the 
boundary-scan update registers. This instruction enhances test efficiency by reducing 
the overall shift path to a single bit (the bypass register) while conducting an EXTEST 
type of instruction through the boundary-scan register. The CLAMP instruction becomes 
active on the falling edge of TCK in the update-IR state when the data held in the 
instruction-shift register is equivalent to octal 6. 


17.3.1.6 BYPASS INSTRUCTION. The BYPASS instruction selects the single-bit 
bypass register, creating a single-bit shift register path from the TDI pin to the bypass 
register to the TDO pin. This instruction enhances test efficiency by reducing the overall 
shift path when a device other than the MCF5307 processor becomes the device under 
test on a board design with multiple chips on the overall 1149.1 defined boundary-scan 
chain. The bypass register has been implemented in accordance with 1149.1 so that the 
shift register stage is set to logic zero on the rising edge of TCK following entry into the 
capture-DR state. Therefore, the first bit to be shifted out after selecting the bypass 
register is always a logic zero (to differentiate a part that supports an IDCODE register 
from a part that supports only the bypass register). The BYPASS instruction goes active 

on the falling edge of TCK in the update-IR state when the data held in the instruction shift 
register is equivalent to octal 7. 
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17.3.2 IDcode Register 


An IEEE 1149.1 compliant JTAG identification register has been included on the 
MCF5307. The MCF5307 JTAG instruction encoded as octal 1 provides for reading the 
JTAG !Dcode register. 


ID code Register 


31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 
VERSION NO 0 1 0 0 1 1 0 0 0 0 0 0 
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 





Bits 31-28 Version Number | 
Indicates the revision number of the MCF5307. 


Bits 27-22 Design Center 
Indicates the ColdFire design center. 


Bits 21-12 Device Number 
Indicates an MCF5307. 


Bits 11-1 JEDEC ID | 

Indicates the reduced JEDEC ID for Motorola (JEDEC refers to the Joint Electron Device 
Engineering Council. Refer to JEDEC publication 106-A and chapter 11 of the IEEE 
1149.1 Standard for further information on 1 this field). 


Bit 0 | 
Differentiates this register as the JTAG IDcode register (as opposed to the bypass 
register) according to the IEEE 1149.1 Standard. 


17.3.3 JTAG BOUNDARY-SCAN REGISTER 


The MCF5307 model includes an IEEE 1149.1-compliant boundary-scan register. The 
boundary-scan register is connected between TDI and TDO when the EXTEST or 
SAMPLE/PRELOAD instructions are selected. This register captures signal pin data on 
the input pins, forces fixed values on the output signal pins, and selects the direction and 
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drive characteristics (a logic value or high impedance) of the bidirectional and three-state 


signal pins. 
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Table 17-3. Boundary-Scan Bit Definitions 


CELLTYPE | PINCELLNAME | PINTYPE | 
po | OCH fT PP@)enable fT - 










i [rin [PPO CdYSCiCO 
2 | Pin PO) SO 
[3 |_ lock [_PPtyenable 
[4 {_oPin [PCO 
—s_ [Pin [yi 
[6 | loot | PP@@yenable 
7 [orn [Py CSCO 
s_ [Pin [Py 

[3 | toc | PPajenablo 
Ld 

A) 
[72 | toc | PPUayenabio—[- — 
3 [ _OPin | PP@ —+4| 

4—[ Pin) CSCO 
[1s | 10.08 [PP (6) enable [SS 
76 | _oPin [| —=PP)SC«dYSCCSO 
a7_[_1Pin_[ PP) —SC«dSCSCwO 

[te] 1ocr_|—_PP(eyenablo[- — 
ta [ Pin [PPO 
[20 | _1Pin_[ PP) —~| ~~ 

[21 | 106i [PP enable [~~ 
2a [orn [PP ——SC*dSC*~‘iO 

[23 | 1Pin [PP SCdCSCO 
[24 | oPin_[___Pst@y_—~i| io 
[25 [Orin [| Pst@)——SC«d|s~SCi 
[26 | oPin | _psiay——SCidP Si 
[27_|_oPin [Pst _——S«dP~SCi 
[28 | _OPin_[_DDATAG) [| _o 
[29 [Pin | _DpATA®) | oO 
[30 | OPin | _DbATAT) = iO 
[3i_|_oPin | DDATAQ) [oo 
[se | oPin [STK «Pi 
[33 [Pin fSKING 
[34 [10.0 XRSTO enable | 
[35 [ Orin | _—XASTO. «| SO 
[36 [Fin [| xasTO—«| iO 

[s7|_oPin_[_BclKo.-[ oo 
/~se_[—_1Pin [| EoGeset_——«[ 
FO 
[40 [_1Pin [xT 
ai_[_oPin[_arst_——SOidP~ Si 
ae _[ Pin [erst 
[4s [_oPin [xa Sidi 
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Table 17-3. Boundary-Scan Bit Definitions (Continued) 

















BIT 
aa [tpn | XDD 
[as_[_OPin [asa Si 
[46 _| Pin [—ersai 
[a7_| Pin [Hi 
[48 | lock [DATA enable [ 
[4a [OP [ DATA +O 
[50 | _1Pin [| DATA() | 
[si [Pin | _DaTA”) | WO 
[se | 1Pin | baTagy) [SO 
[53 |_OPin [DATA | _10 
[54 | 1Pin[_DATA@) =O 
[ss] OPin [| DATA@)——_—~+| iO 
[56 | 1Pin [| DATA) [0 
[s7_|_OPin [DATA =| 
[58 [_tPin[_bata@y | +0 
[s9_[_O.Pin_[_DATAS)__~| vO 
[60 [Pin [DATAGS) [vO 
[e1_|OPin | _DaTate) | 0 
[ee _[ (Pin [| DATA) | vO 
[63 | O.Pin | _DaTA”) | WO 
[64 [—_1Pin | batay |v 
es_| Pin | DATAS) =| —SWO 
[6 [_iPin | bata@) | vO 
—e7_| Pin | _ DATA) _—~| sO 
[e8_|—_iPin | Datay | 0 
[#9 |__OPin | DATA(IO) | vO 
[70_|—_1Pin | BATA) | __VO 
71 | OPin[_DaTacay if 
[7a | Pin [__DaTatrty [| 
(73_|_OPin [| _DATA(ta)___| V0 
(74 |_1Pin | bataa) [vO 
(75 | OPin | __DaTartay___| V0 
[76 | Pin DATA(TS)__— | 
—77_|__ Fin baTaga) 
[—7e_| Pin | —_Dataciay__ | _0 
[7a | 0.Pin | BaTAS) | vO 
[80 |_1Pin | __ DATA) | 00 
[si | OPin[_DaTAC6) | 
[2 | iPin | DaTaGe) [| —O 
[a3 | Pin | _DATA(T7)___| 0 
[a4 | _1Pin | __DATA(T7)___ [| __O 
[a5 | OPin | DATAGa) | _VO 
(a6 | 1Pin[_DaTACTay [vO 
(—87_[ Pin [_DaTA) | vO 
(a8 | Pin [| Batartay__[ v0 
[a9 [_OPin[_DaTA@o) |v 
[90 [_1Pin [Bataan [V0 
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Table 17-3. Boundary-Scan Bit Definitions (Continued) 
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| BIT | CELLTYPE | PINCELLNAME | PINTYPE _ 
81 [Orin | _DATA@N) | v0 
[92 | 1Pin | __pata@ty [vo 
[93 | OPin | _DATA@a) «| 
[94 | 1Pin | _DaTA@ay_——[ 
(0 
as—[ te | bata} [i 
DATA(24) 
98 | 1Pin | ___DATA(2¢) 
[99 | oPin | _DATA@S) | —O 
[400 [tin | __ DATA(25) 
[ot | OPin | __DATA6) V0 
[102 | tin | __DATA26) 
[408 | OPin | DaTA@7) | iO 
[404 [ Pin [__DATAG@?) =O 
05 | OPin | DATA@®) | vO 
[10s | Pin | __DATA(28) 
ee a 
[ios [Pin | DATA) [| vO 
og | OPin | DATA(GO)__-[ vO 
410 | Pin | DATA(G) [sO 
it | _oPin | __paTa@y [vo 
[42 | Pin | __DaTa@) | _vo— 
is [orn [_SDA_—«dT SC 
ee a 
Te [tin [S 
a7 | orin_[__xBE@)—Cd CO 
ae [Orin [xe «sid 
[ie |OFin | __xBE) 
Opin | _xBE(@) —+| oO 
Ta | apn] sas] 3 
Opin | SRAS__—~| iO 
(425 | _oPin__| __XCas(@)___—‘| Oo 
[426 [Orin | _xcas@ «| iO 
ced 
[128 | oPin_| _xCas()___ [0 
[129 [Orin | _xRastt) | Oo 
30 | OPin | __XRAS(@)___-‘[ oO 
ee i 
ga [Pin [| tiNO 
[433 [ Orin [Touro 
[ia4_ | oPin | __rourr si ~ 
iss [iin [BGS 
ia7 | _OPin | -xBR_—SC=~ESC“‘iOCC*” 
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Table 17-3. Boundary-Scan Bit Definitions (Continued) 


sin © A 

[i30 | uPin [IRS 

140 [Pin [ios 
141 












iat_[ Pin | xina?———s 
[pe _1Pinxasth 
143 [Orin [iTS ——SC—=‘iSC(‘™—_+t 
Di4a [Pn | xts—S—CidsCSCiO 
(145 |1Ocw | _XTAenable [| 
[146 [OP | —OXTA™—SSCSC*dSCO 

a7_|__1Pin__|__XTA_—<d| iO 
i4e | OPin [WSS 
ae [rin [| SsrRW STS 
50 [orn | xas-—S—SC*dCSCSCO 
ist | Pin | xAS—SCdSSCO 
(ise | OPin | __xesm SiS Ci 
153 | OPin | _xes@) | Oo 
454 | Pin | __xes(e)_—SC*d SSC 
(455 | OPin [| _-xes@y)_—SO«dT SC 
[186 | OPin_[__xesi@y)__—<i| iO 
[187 |__oPin [| __xes@y)——S«d| =~ 
188 | OPin | _xesay Sid ~SSCi 
150 | oPin [| __-xes(o) Sid SSC 
[160 | OPin [| _—-XOE—~SC~dSC“‘ Ot 
iet_| oPin [sq _—i| vo 
ies [Pin [say ——i| io 

ies | _OPin | SZ ——~«| sO 
tea [Pin | _sizoy———Sid SCO 
[465 [loch [PP (ts)enabie[- 
(ies [Pin | _—=PPCis) SY SO 
167 | OPin [| __PP(s) «dS 
(ies |10.ct | PP(Ta) enable 
ies | tPin[__PPtia) | CO 

70 | OPin | __PP(I) | SSO 
a7i_| toc PPT) enable 

72 | 1Pin__|___ Ppt) | SCO 
7s [oP [| _PPia)——SOid SCO 
(a74_| to. | PP(T2) enable —[ — 
a7 |__ tpn | _—~PPta)—SiY SSO 
76 | OPin [| _PPa)——SO«dY SCO 
Ci77_| ioc | PP(Ti) enable | 
ie [Pin [__—PPa)—sd| 
[i7e | OPin [| _P() ———S«d| SCO 
[480 | 10.cl | PP(T0) enable 
iat [Pin | PP) | iO 
[182 | OPin | PPO) Sid 
[183 | 10.cr | PP@enable | 
ies [Pin | —=PP®) «CSCO 
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Table 17-3. Boundary-Scan Bit Definitions (Continued) 
































| BIT | CELLTYPE | PINCELLNAME | PINTYPE | 
a7 |_Pin |=) 
89 | 10.4 

491 [_OFin [ADDR 

[492 | _iPin | __ADDAG23)__ 
198 | O.Pin_| _ADDR(22)___ 

[194_[ Pin [_ADDR(@2)__ 

[198 [_OPin | _ADDR(2T) 


ak 
<e) 
~] 


ADDR(20) 

O.Pin_ | _ADDR(T7)_ 

OPin 

O-Pin 
[ADD AIS) [vo 


a 
co 
ee) 


oO 


MIM} M{M] Mw] yw] = 
O| 9/9} 5/9] © 
Hi] RB} O/ MO] 4) S| oO 


N 
© 
“J 


0 


NM 
© 
Oo 


aera. 
ae 
ae 
Co] 


PM} DM] RM 
—+!|O; © 
Co} O; © 


ee 


214 | 


| ADDR(12) 
ADDR(11) 


| ADDR(11) : 
O.Pin ADDR(10) 
Pin ADDR(10) 


219 O.Pin ADDR(9) } vo | 
220 ADDR) | vO 


PLDT NO], POTD 
re ere ears ae are a 


N) 
mb 
0 





/0 
VO 
VO 
0 
VO 
VO 
VO 
VO 
VO | 
VO 
VO 
VO 
VO 
VO 

ge [Pin | ADDR) —~| VO 


223 O.Pin |. ADDR(7) 
224 | Pin ADDR(7) 


Pin 

"2a1 | OPin | __ADDR(@)__—_ 
[223 [1Pin 

eo 
25 |__OPin_| _ADDR(®) | 10 
26 |__1Pin 
227 
228 | __lPin | ADAG) 


231 O.Pin ADDA(3) 
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Table 17-3. Boundary-Scan Bit Definitions (Continued) 


BIT CELL TYPE PINCELL NAME PIN TYPE 

























ADDR) 
CPi 
cPin 
Pi 10 


OPin 
17.3.4 JTAG BYPASS REGISTER 


The MCF5307 includes an IEEE 1149.1-compliant bypass register, which creates a single 
bit shift register path from TDI to the bypass register to TDO when the BYPASS instruction 
is selected. 


17.4 TAP CONTROLLER 


The value of TMS at the rising edge of TCK determines the current state of the TAP 
controller. There are basically two paths that the TAP controller can follow: The first, for 
executing JTAG instructions; the second, for manipulating JTAG data based on the JTAG 
instructions. The various states of the TAP controller are shown in Figure 17-2. For more 
detail on each state, refer to the IEEE 1149.1 Standard JTAG document. Do note, though, 
that from any state the TAP controller is in, Test-Logic-Reset can be entered if TMS is held 
high for at least five rising edges of TCK. 
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TEST - LOGIC - RESET 
TLR 


OQ <~- VALUE OF TMS AT RISING EDGE OF TCK 


1 
SELECT - DR - SCAN SELECT - IR - SCAN 
SeDR SelR 
0 0 
CAPTURE - DR 1 CAPTURE - IR | 
| CaDR CalR . 






















RUN - TEST - IDLE 
RTI 







0 0 





SHIFT-DR V SHIFT -IR 
ShDR 0 ShIR 
1 { | 
EXIT1 -DR , EXIT1 -IR 1 
~ EIDR E1IR 





PAUSE - DR 
PaDR 


EXIT2 - IR 
E2iR 


UPDATE - IR 
UpIR 


Figure 17-2. JTAG TAP Controller State Machine 


17.56 RESTRICTIONS 


The test logic is implemented using static logic design, and TCK can be stopped in either 
a high or low state without loss of data. The system logic, however, operates on a different 
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system clock which is not synchronized to TCK internally. Any mixed operation requiring 
the use of 1149.1 test logic in conjunction with system functional logic that uses both 
clocks, must have coordination and synchronization of these clocks done externally to the 
MCF5307. 


17.6 DISABLING THE IEEE 1149.1 STANDARD OPERATION 


There are two methods by which the MCF5307 can be used without the IEEE 1149.1 test 
logic being active: 1) Nonuse of the JTAG test logic by either nontermination 
(disconnection) or intentional fixing of TAP logic values, and 2) Intentional disabling of the 
JTAG test logic by NOT setting MTMOD{[3:0]= 0001 (entering Debug mode). 


There are several considerations that must be addressed if the IEEE 1149.1 logic is not 
going to be used once the MCF5307 is assembled onto a board. The prime consideration 
is to ensure that the IEEE 1149.1 test logic remains transparent and benign to the system 
logic during functional operation. This requires the minimum of either connecting the 
TRST pin to logic 0, or connecting the TCK clock pin to a clock source that will supply five 
rising edges and the falling edge after the fifth rising edge, to ensure that the part enters 
the test-logic-reset state. The recommended solution is to connect TRST to logic 0. 
Another consideration is that the TCK pin does not have an internal pullup as is required 
on the TMS, TDI, and TRST pins; therefore, it should not be left unterminated to preclude 
mid-level input values. Figure 17-3 shows pin values recommended for disabling JTAG 
with the MCF5307 in JTAG mode. 











TMS/BKPT 


TDI/DSI 


TRST/DSCLK 


TCK 


NOTE: MTMOD[3:0] SET TO ‘0001’ ALLOWS JTAG MODE. 


Figure 17-3. Disabling JTAG in JTAG Mode 





A second method of using the MCF5307 without the IEEE 1149.1 logic being active is to 
select Debug mode by setting MTMOD[3:0]= 0000. The IEEE 1149.1 test controller is 

now placed in the test-logic-reset state by the internal assertion of the TRST signal to the 
controller and the TAP pins function as Debug mode pins. While in JTAG mode, input pins 
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TDI/DSI, TMS/BKPT, and TRST/DSCLK have internal pullups enabled. Figure 17-4 
shows pin values recommended for disabling JTAG with the MCF5307 in Debug mode. 








TDI /DS! 


DEBUG INTERFACE TMS/BKPT 


TRST/DSCLK 


TCK 


NOTE: MTMOD{3:0] NOT SET TO’ 0001’ PROHIBITS JTAG. 


Figure 17-4. Disabling JTAG in Debug Mode 


17.7 MCF5307 BSDL FILE 


-- MOTOROLA S SDT JITAG SOFTWARE 
-- BSDL File Generated: Wed Jul 2 18:00:53 1997 


-- Revision History: 


entity MCF5307 is 
generic (PHYSICAL PIN MAP : string := "TOFP_208"); 


port ( BKPT:inbit; 
DSI:inbit; 

DSO: outbit; 
DSCLK:inbit; 
TCK:inbit; 

ADDR: inoutbit_vector(0 to 23); 
SIZ:inoutbit_vector(0 to 1); 
XOE:bufferbit; 
XCS:bufferbit_vector(0 to 7); 
XAS:inoutbit; 

RW: inoutbit; 
XTA:inoutbit; 
XTS:inoutbit; 

XRSTI:inbit; 

XBR: bufferbit; 
XBD:bufferbit; 

XBG: inbit; 
XIRQ7:inbit; 
XIRQO5:inbit; 
XIRQ3:inbit; 
XIRQ1:inbit; 
TOUT1:bufferbit; 
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TOUTO 
TINO 
TIN1 
XRAS 
XCAS 

XDRAMW 
SRAS 
SCAS 
SCKE 

XBE 


RiszZ 
TXD2 
CTs. 
RTS1 


TXD1 


BCLKO 


:bufferbit; 
aenniglen a Bo 
saHbies 
:bufferbit_vector(0 to 1); 
:bufferbit_vector(0 to 3); 
:bufferbit; 
:bufferbit; 
:bufferbit; 
:bufferbit; 
:bufferbit_vector(0 to 3); 
SCLs 
SDA: 
DATA: 
XHIZ: 
MTMOD: 
CTS2% 
:bufferbit; 
RXD2: 
:bufferbit; 
:inbit; 
:bufferbit; 
RXD1: 
:bufferbit; 
EDGESEL: 
:bufferbit; 
XERSTO:? 
CLKIN: 
PSTCLE:? 


noutbit; 
inoutbit; 


inoutbit_vector(0 to 31); 


inbit; 


linkagebit_vector(0 to 3); 


inbit; 


inbit; 


inbit; 
inbit; 
inoutbit: 


inbits 
bufferbit; 


IEEE 1149.1 TEST ACCESS PORT (JTAG) 


/ 


DDATA: bufferbit_vector(0 to 3); 
PST: bufferbit_vector(0 to 3) 
PP: inoutbit_vector(0 to 15); 
VDD: linkagebit_vector(0 to 27); 
GND: linkagebit_vector(0 to 28); 
PVDD: linkagebit_vector(0 to 1); 
PGND: linkagebit_vector(0 to 1); 
PLLTPA: linkagebit) ; 


use STD_1149_1_1994.all; 
attribute COMPONENT_CONFORMANCE of MCF5307 entity is "STD_1149 1.1993"; 
attribute PIN_MAP of MCF5307 entity 1s PHYSICAL_PIN_MAP; 


constant TQFP_208 PIN_MAP_ STRING := 





"VDD: thoy “Jy cheer 22a 2G. Bay. 5) S24 SIs 6S Papo Le CoG. Gy LOS, 
Psy. eee AA 5 OLS "  & 
wiAS, 152%. TS74, P65 173) 27st, 1Tolsy. 1975. 2OSh5, Mee 

"ADDR: (2 poe Se Oe Be Se ay 2 2e Ae, 255. Te, 263. - 294.20. 225 234 
24. 26; 27% 28> 307 " & 
Hos soy Soa) e ae 

"GND: (4 10%: i 25,--33 , Aly 2-435) 53 ‘OL, 697-774 B57 (93) -LOl, 
£04, 209%: Tis. 125, " & 
"133, 141, 148, 156; 161, 169). 1755 188, 194,201, 208).,. "“& 
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"PP: (207, 206, 204, 203, 202, 200, 199, 198, 35, 36, 38, 39, 40, 
AD, AS, DA). © se 
"SLA? (46, 47), " & 
"XOE: 49, " & 
AC oe (50, 51, 54, 55, 56, 58, 59, 60), " & 
"XAS: 62, " & 
"RW: 63, " & 
"XTA: 64, "& 
"XTS: 66, "& 
"XRSTI: 67, " & 
"XIRQ7: 68, "& 
"XTRQS: 70; °- & 
"XIRQ3: Tp oe 
"XIRQ1: Page 
"XBR: 74, "& 
"XBD: 75: SX & 
"XBG: 76, " & 
"TOUT: 78, "& 
"TOUTO: 79, " & 
"TIN: 80, " & 
"TINO: 82, " & 
"XRAS: (83, 84), " & 
"XCAS: (86, 87, 88, 90), " & 
"XDRAMW: 91, " & 
"SRAS: O23. 8 & 
"SCAS:; 94, " & 
"SCKE: 95, " & 
"XBE: (96, 98, 99, 100), " & 
"SCs: £023: " & 
"SDA: 103, "& 

"DATA: (147, 146, 144, 143, 142, 140, 139, 138, 136, 135, 134, 132, 
13d 2304 2284 1274, 8 we | 
"126, 124, 123, 122, 120, 119, 118, 116, 115, 114, 112, 111, 110, 108, 107, 106), 
" & 

"DSCLK: 149, "& 

"TCK: 150, " & 

"DSO: 154) PS 

"DSI: 153; °" & 

"BKPT: 154, "& 

"XHIZ: 155, %& , 
"MTMOD: (158, 159, 160, 162), " & 
HOTS2< 163, "& 

"RTS2: 164, " & 

MRXD2e © 166, "& 

"TXD2: 167, " & 

weTS 1: 168, "& 

RUS 1” 170, " & 

"RXD1: 171, " & 

"TXD1: 172, "& 
"EDGESEL: 174, " & 

"BCLKO: 176, " & 

"XRSTO: 178; " & 

"PVDD: (179, 185), "& 
"CLKIN: 180, "& 
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"PGND: (181, 183), " & 

"PLLTPA: 182, " & 

"PSTCLE: 184, " & 

"DDATA: (186, 187, 189, 190), "& 

"DST: (192, 193, 195, 196) "; 
attribute TAP_SCAN_IN of DSI : signal is true; 
attribute TAP_SCAN_OUT of DSO : signal is true; 


attribute TAP_SCAN_MODE of BKPT : signal is true; 
attribute TAP_SCAN RESET of DSCLK : signal is true; 
attribute TAP_SCAN_CLOCK of TCK : Signal is (20.0e6, BOTH); 


attribute INSTRUCTION_LENGTH of MCF5307 : entity is 3; 


attribute INSTRUCTION_OPCODE of MCF5307 : entity is 
"EXTEST (000)," & 
"SAMPLE (100)," 
"IDCODE (001)," 
"CLAMP (110) ," 
"HIGHZ (101)," 
"BYPASS (111) "; 


PR | —| 


attribute INSTRUCTION_CAPTURE of MCF5307 : entity is "001"; 
attribute IDCODE_REGISTER of MCF5307 : entity is 


"0000" & -- version 

"010011" & -- manufacturer's use 
"0000000011" & -- sequence number 
"00000001110" & -- manufacturer identity 
wees -- 1149.1 requirement 


attribute BOUNDARY_LENGTH of MCF5307 : entity is 239; 


attribute BOUNDARY_REGISTER of MCF5307 : entity is 





-- num cell port func safe [ccell dis rslt] 
=O (BC .2. “F; controlr, 1)" & 
wi 8 (BC_2, PP(0), output3, X, 0, is Z)," & 
"2 (BC_4, PP(0), input, X)," & 
"3 (BC 225: Fy controlr, 1)," & 
"4 (BC_2, PP(1), output3, X, 3; a A Z)," & 
ales (BC_4, PP(1), input, X)," & 
"6 (BC_2, *, controlr, 1)," & 
aa | (BC_2, PP(2), output3, xX; 6, LG Z)," & 
"8 (BC_4, PP(2), input, X)," & 
"9 (BC_2,- *; controlr, A) go ob 
"10 (BC_2, PP(3), output3, X, 9, i Z)," & 
at Be (BC_4, PP(3), input, X)," & 
w412 (BC_2, *, controlr, 1)," & 
e713 (BC_2, PP(4), output3, X, 12, A Z)," & 
"14 (BC_4, PP(4), input, X)," & 
a Bo (BC_2, *, controlr, 1)," & 
"16 (BC_2, PP(5), output3, x; 15; 1, Z)," & 
A (BC_4, PP(5), input, X)," & 
"18 (BE 225 4 controlr, 1)," & 
"19 (BC_2, PP(6), output3, X, 18, 1; Z)," & 
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-- num cell port func safe [ccell dis rslt] 
"20 (BC_4, PP(6), input, X)," & 
"21 (BC 2,-°*; controlr, Lg ee ; 
#22 (BC_2, PP(7), |. output3, X, 2%, i; Z)," & 
"23 (BC_4, PP(7), input, X),".& 
"24 (BC:-2; PST(3) ; output2, X)," & 
"25 (BC-2; PSTt2) output2, X)," & 
"26 (BC_2, PST(1), output2, X)," & 
"27 (BC_2, PST(0), output2, X)," & 
"28 (BC_2, DDATA(3), output2, eB 
"29 (BC_2, DDATA(2), output2, X)," & 
"30 (BC_2, DDATA(1), output2, X)," & 
#31 (BC_2, DDATA(0), output2, X)," & 

832 (BC_2, PSTCLK, output2, X)," & 

"33 (BC_4, CLKIN, input, X)," & 
"34 (BC .2, *, controlr, 1)," & 
"35 (BC_2, XRSTO, output3, X, 5a: 1; Z)," & 
"36 (BC_4, XRSTO, input, Rg he 
ae a | (BC_2, BCLKO, output2, X)," & 
"38 (BC_4, EDGESEL, input, X)," & 
"39 (BC_2, TXD1, output2, X)," & 

-- num cell port func safe [ccell dis rslt] 
"40 (BC_4, RXD1, input, X)," & 
"Al (BC_2, RTS1, output2, X)," & 
"42 (BCc_4, CTSI1, input, Kyo ke 
"43 (BC_2, TXD2, output2, X)," & 
"44 (BC_4, RXD2, input, X)," & 
"45 (BC_2, RTS2, output2, X)," & 
"46 (BC_4, CTS2, input, X)," & 
"47 (BC_4, XHIZ, input, X)," & 
"48 (BC.2, *, controlr, 1)," & 
"a9 (BC_2, DATA(0), output3, X, 48, 1, Lif Vig 
"50 (BC_4, DATA(0), input, X)," & 
*51 (BC_2, DATA(1), output3, X, 48, Ly Z)," & 
gis (BC_4, DATA(1), input, X)," & 
35 (BC_2, DATA(2), output3, X, 48, ie Zig’ obs 
"54 (BC_4, DATA(2), input, X)," & 
"55 (BC_2, DATA(3), output3, X, 48, i; Z)," & 
"56 (BC_4, DATA(3), input, X)," & 
"57 (BC_2, DATA(4), output3, ay 48, des Z)," & 
"58 (BC_4, DATA(4), input, X)," & 
"59 (BC_2, DATA(5), output3, X, 48, i ayy & 
num cell port func safe [ccell dis rslt] 
"60 (BC_4, DATA(5), input, X)," & 
"61 (BC_2, DATA(6), output3, X, 48, ale Zp & 
"62 (BC_4, DATA(6), input, X)," & 
"63 (BC_2, DATA(7), output3, x, 48, Ly Z)," & 
"64 (BC_4, DATA(7), input, X)," & 
"65 (BC_2, DATA(8), output3, ee 48, dy Z)," & 
"66 (BC_4, DATA(8), input, X)," & 
"67 (BC_2, DATA(9), output3, xX, 48, ie Z)," & 
"68 (BC_4, DATA(9), input, X)," & 
"69 (BC_2, DATA(10), output3, xX, 48, - Z)," & 
"70 (BC_4, DATA(10), input, X)," & 
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DATA(11), input, 
DATA(12), output3, 
DATA(12), input, 
DATA(13), output3, 
DATA(13), input, 
DATA(14), output3, 
DATA(14), input, 
DATA(15), output3, 
port func 
DATA(15), input, 
DATA(16), output3, 
DATA(16), input, 
DATA(17), output3, 
DATA(17), input, 
DATA(18), output3, 
DATA(18), input, 
DATA(19), output3, 
DATA(19), input, 
DATA(20), output3, 
DATA(20), input, 
DATA(21), output3, 
DATA(21), input, 
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DATA(29), output3, 
DATA(29), input, 
DATA(30), output3, 
DATA(30), input, 
DATA(31), output3, 
DATA(31), input, 
SDA, output2, 
SDA, input, 
SCL, output2, 
SCI; input, 
XBE(3), output2, 
XBE(2), output2, 
XBE(1), output2, 
port func 
XBE(0), output2, 
SCKE, output2, 
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X, 48, 

X)," & 

X, 48, 

© uae 

X, 48, 

X)," & 

K, 48, 

X)," & 

xX, 48, 

safe [ccell dis 

X)," & 

X, 48, 

X)," & 

x 48, 

X)," & 

X, 48, 

X)," & 

x, 48, 

X)," & 

x, 48, 

X)," & 

X, 48, 

X)," & 

xX, 48, 
'X)," & 

xX, 48, 

X)," & 

x, 48, 

X)," & 

X, 48, 


safe [ccell dis 
X)," & 


xi 48, 
X)," & 
xX, 48, 
Rigo ee 
ba 48, 
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xX, 48, 
X)," & 
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X)," & 
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X)," & 


safe [ccell dis 
© eee 
X)," & 
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"225 (BC_2, ADDR(6), output3, X, 190, I Zac oe 
"226 (BC_4, ADDR(6), input, | X)," & 

"227 (BC_2, ADDR(5), output3, x 190, Te Zyy" & 
"228 (BC_4, ADDR(5), input, xX)," & 

"229 (BC_2, ADDR(4), output3, X, 190, dey Z)," & 
"230 (BC_4, ADDR(4), input, | X)," & : 

"231 (BC_2, ADDR(3), output3, | X, 190, 1, Zh & 
"232 (BC_4, ADDR(3), input, xt & 

"233 (BC_2, ADDR(2), output3, a 190, 1, ee 
"234 (BC_4, ADDR(2), input, xjo" & 

"235 (BC_2, ADDR(1), output3, X, 190, A, Z)," & 
"236 (BC_4, ADDR(1), input, X)," & 

"237 (BC_2, ADDR(0), output3, x 190, Le Z)," & 


1259 (BC_4, ADDR(0), input, XxX)"; 


end MCF5307; 


17.6 OBTAINING THE IEEE 1149.1 STANDARD 


The IEEE 1149 Standard JTAG specification is a copyrighted document and must be 
obtained directly from the IEEE: 


IEEE Standards Department 
445 Hoes Lane 

P.O. Box 1331 

Piscataway, NJ 08855-1331 
USA 


http://stdsbbs.ieee.org/ 


Fax: 908-981-9667 
Information: 908-981-0060 or 1-800-678-4333 
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SECTION 18 
ELECTRICAL SPECIFICATIONS 


Table 18-1. Maximum Ratings 


[seseeTerwomefane [tw | su | wo 


Table 18-2.Operating Temperature 


[uomnrwagamsenTrwesis | Tm [| 


1. This published maximum operating ambient temperature should be used only as a system design guide- 


line. All device operating parameters are guaranteed only when the junction temperature lies within the 
specified range. 
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Table 18-3.DC Electrical Specifications (Vcc = 3.3 Vdc + 0.3 Vdc) 


CHARACTERISTIC SYMBOL | win | MAX. UNITS 
Input High Voltage Vin p 2 | 88 | 


Input Low Voltage Vit 














Input Signal Undershoot 


Input Signal Overshoot Le 






Input Leakage Current @ 0.5/2.4 V 
During Normal Operation 






Hi-lmpedance (Three-State) Leakage Current Its) 
@ 0.5/2.4 V During Normal Operation 


Signal Low Input Current, Vi, = 0.8 V° he 









Signal High Input Current, V4 = 2.0 V° WH 





Output High Voltage Io, = 8mA', 16mA? 





—<—$ a | 


PSTCLK, PST[3:0], DDATA[3:0], DSO, TOUT[1:0], SCL, SDA, RTS[2:1], TXD[2:1] 
2. BCLKO, RAS[1:0], CAS[3:0], DRAMW, SCKE, SRAS, SCAS 
3. BKPT/TMS, DSI/TDI, DSCLK/TRST 
4. Capacitance Cyy is periodically sampled rather than 100% tested. 
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ELECTRICAL SPECIFICATIONS 


Table 18-4.Clock Timing Specification 


CHARACTERISTIC 


CLKIN cycle time 30 
CLKIN rise time (.5V to 2.4 V 
CLKIN fall time (2.4V to 0.5 V 
(at 1. 


) 
2 0.5 V) 
[comanvoneensy | 4 

[peteikenieine 
[petexxanyoetarsy | 4 

[scixocweime id 
4 





CLKIN 


PSTCLK 





BCLKO 








Note: Signals above are shown in relation to the clock. No relationship between signals is implied or intended. 
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ELECTRICAL SPECIFICATIONS 


Table 18-5.Reset Timing Specification 


= CHARACTERISTIC 


Valid to CLKIN (setup) 75 
| R2 CLKIN to Invalid (hold) 
} RS RSTI to invalid (hold) 3 


RSTI and Data[7:0] are internally synchronized. This setup time must be met only if recognition on a particular clock is 
required. 





CLKIN 






Boa 





@) <> | > + (%) 


DATA[7:0] 


Note: Mode Selects are registered on the previous rising CLKIN edge before the cycle in which RSTI is 
recognized as being negated. 
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ELECTRICAL SPECIFICATIONS 


Table 18-6.Input AC Timing Specification 





a | CHARACTERISTIC 


Valid to BCLKO Rising (setup) 7 

BCLKO Rising to Invalid (hold) 

Valid to BCLKO Falling (setup) 7.5 

BCLKO Falling to Invalid (hold) 

BCLKO to Input High Impedance 
B7 

1 


2 


EDGESEL Valid to BCLKO 75 
| B7 BCLKO to EDGESEL Invalid 


Inputs (rising): BG, TA, ADDR[23:0], PP[15:0], SIZE[1:0], R/W, TS, EDGESEL, DATA[31:0], IROI7], 
IRQ[5],[RQ[3}, IRQ[1], BKPT 


Inputs (falling): AS, EDGESEL 


3. IRQI[7], IRQ[5], IRA[3], TRQ[1], BKPT, and AS are internally synchronized. This setup time must be met only 
if recognition on a particular clock is required. 





Table 18-7. Output AC Timing Specification 


= CHARACTERISTIC 


B10! | BCLKO Rising to Valid 


B11! 


B124 | BCLKO to High Impedance 
(Three-State) 
BCLKO Falling to Valid 


to High Impedance 


vo fF 
1. 





IZ to Low Impedance 


Outputs (rising): RSTO, DATA([31:0], TS, BR, BD, ADDR/[23:0], PP[15:0], R/W, SIZE[1:0], TA, RAS[1:0], 
CAS[3:0], DRAMW, SCKE, SRAS, SCAS 


2. Outputs (falling): DATA[31:0], ADDR[23:0], PP[15:8], AS, CS[7:0], BE[3:0], OE, RAS[1:0], CAS[3:0), 
DRAMW, SCKE, SRAS, SCAS 


3. Edgesel: DATA[31:0], ADDR[23:0], PP[15:8], RAS[1:0], CAS[3:0], DRAMW, SCKE, SRAS, SCAS 
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4. High impedance (Three-State): DATA[31:0], ADDR[23:0], PP[15:0], RW, SIZE[1:0], TS, AS, TA 


BCLKO 


INPUTS 


BCLKO 


INPUTS 


BCLKO 





INPUTS 
BCLKO 
EDGESEL 
BCLKO 
ik) 
» EDGESEL 
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BCLKO 


OUTPUTS 


BCLKO 


OUTPUTS 


BCLKO 


OUTPUTS 


EDGESEL 


OUTPUTS 


OUTPUTS 


ELECTRICAL SPECIFICATIONS 


| 
ag a 
| | 
| | 
| | 
| | 
| @ | |, 6H 
~<——_ > —r «= 
| 
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ELECTRICAL SPECIFICATIONS 


Table 18-8.Debug AC Timing Specification 


CHARACTERISTIC 


PSTCLK to Invalid (Output hold) 


Valid to PSTCLK (Input setup) 
PSTCLK to Invalid (Input hold) 


1. DSCLK and DSI are internally synchronized. This setup time must be met only if recognition on a particular 
clock is required. 





[1 [ PSTCLK to Vali (Output vate) 
| bet 
Lo 


PSTCLK 


DSCLK 


DSI 


PST[3:0} 
DDATA(3:0) 
Dso 
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ELECTRICAL SPECIFICATIONS 


Table 18-9.Timer Module AC Timing Specification 








CHARACTERISTIC UNITS 


clocks 
nsec 
nsec 
I 


bus 
clocks 


bus 
clocks 











TIN Cycle time 

TIN Valid to BCLKO (input setup) 
BCLKO to TIN Invalid (input hold) 
BCLKO to TOUT Valid (output valid) 
BCLKO to TOUT Invalid (output hold) 


TIN Pulse Width 1 
TOUT Pulse Width 











N 
af e 





15 
2 


o1 


1 
1 





BCLKO 


TIN 


TIN 


TOUT 
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ELECTRICAL SPECIFICATIONS 


- Table 18-10. UART Module AC Timing Specifications 


) 6omHZ | 90 MHZ UNITS 
[| 
5.5 
BCLKO to RXD Invalid (input hold) 


MAK 

ref = fet 

CTS Valid to BCLKO (input setup) eae fee eo nsec 
Ea a ck ee 
us [aeixow BO vals cama sf | | 
EeeKES 

me ee 














CHARACTERISTIC 




















RXD Valid to BCLKO (input setup) 







BCLKO to TXD Invalid (output hold) 
BCLKO to RTS Valid (output valid) 


BCLKO 


RXD 


CTS 


TXD 


RTS 
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ELECTRICAL SPECIFICATIONS 


Table 18-11. M-Bus Input Timing Specifications Between SCL and SDA 


M2 
M3 
M4 
M5 
M7 





CHARACTERISTIC 









Start Condition Hold Time 
Clock Low Period | = | bus clocks 


SCL/SDA Rise Time 
me 


(VIL= 0.5 V to VIH = 2.4 V) 
ek Reet 


Data Hold Time 
co 


we nog 

Ee ce 

= eee 

(VIH= 2.4 V to VIL = 0.5 V) 

pe 

| M7 Data Setup Time Os p= | nsec | 
Fach 

| Me 











Clock High time 
Start Condition Setup Time 2 bus clocks 
(for repeated start condition only) 











CHARACTERISTIC 









M1! Start Condition Hold Time bus 
clocks 

M2! Clock Low Period 10 bus 
clocks 

M32 SCL/SDA Rise Time msec 

(Vii= 0.5 V to Vin =2.4 V) 

M41 Data Hold Time 7 vé bus 

clocks 


SCL/SDA Fall Time 
(Vin= 2.4 V to Vj, = 0.5 V) 


sa 
ee 
M9’ 










Start Condition Setup Time 20 bus 
(for repeated start condition only) clocks 
Stop Condition Setup Time bus 
clocks 


Note: Output numbers are dependent on the value programmed into the MFDR; an MFDR programmed with 
the maximum frequency (MFDR = 0x20) will result in minimum output timings as shown in the above table. 
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The MBUS interface is designed to scale the actual data transition time to move it to the middle of the SCL 
low period. The actual position is affected by the prescale and division values programmed into the MFDR; 
however, numbers given in the above table are the minimum values. 


2. Since SCL and SDA are open-collector-type outputs, which the processor can only actively drive low, the 
time required for SCL or SDA to reach a high level depends on external signal capacitance and pull-up 
resistor values. 


3. Specified at a nominal 50pF load 





+ = 
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ELECTRICAL SPECIFICATIONS 


Table 18-13. M-Bus Timing Specifications Between BCLKO and SCL, SDA 


CHARACTERISTIC 


SCL, SDA Valid to BCLKO (input setup) 15 
M11 


putt BCLKO to SCL, SDA Invalid (input hold) 
BCLKO to SCL, SDA Low (output valid) 
BCLKO to SCL, SDA Invalid (output hold) 


Since SCL and SDA are open-collector-type outputs, which the processor can only actively drive low, this 
specification applies only when SCL or SDA are driven low by the processor. The time required for SCL or 
SDA to reach a high level depends on external signal capacitance and pull-up resistor values. 





2. Since SCL and SDA are open-collector-type outputs, which the processor can only actively drive low, this 
specification applies only when SCL or SDA are actively being driven or held low by the processor. 


3. SCL and SDA are internally synchronized. This setup time must be met only if recognition on a particular 
clock is required. 


BCLKO 


SCL, SDA IN 


SCL, SDA OUT 


SCL, SDA OUT 
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Table 18-14.General-Purpose I/O Port AC Timing Specifications 










CHARACTERISTIC 


ao eraaeaaao ene epee 
[re [eaxowrrmaaimarea |» | [2] | we 
[F8[ecixo wer vas uti | | | | | nme 
[re [Bax wrrimata oun | 8 | - [2] | me 






BCLKO 


- PPIN 


PP OUT 
{ \ 
: { 
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Table 18-15. IEEE 1149.1 (JTAG) AC Timing Specifications 


CHARACTERISTIC 


TCK Frequency of Operation 10 ) 0 | 10 | MHz 


Ji TCK Cycle Time 

J2a TCK Clock Pulse High Width 40 
measured at 1.5 V 

J2b TCK Clock Pulse Low Width 40 
measured at 1.5 V 

J3a TCK Fall Time 
(Viy=2.4 V to Vj, =0.5V) 


J3b TCK Rise Time 
(Vj, =0.5v to Vin=2-4V) 


: 


TRST Pulse Width 
(asynchronous to clock edges) 


TCK falling to TDO Valid 
(signal from driven or three-state) 


: , | 

TCK falling to TDO High Impedance 

: | | 
12 


5 


100 


TCK falling to Boundary Scan Data Valid 
(signal from driven or three-state) 

J TCK falling to Boundary Scan 
Data High Impedance 





oO}; wofwl ow es 
oO} 8/6] Ss 
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TCK 


TDI, TMS 


BOUNDARY 
SCAN DATA 
INPUT. 





TRST | | 


| ae an Se 
Ow m 
TD0 cane: ag Re sem 
| | | +> 


| 
BOUNDARY (mn), saa | ) 


OUTPUT ; | (12) 
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SECTION 19 
MECHANICAL DATA 


Visit this URL (http:/;www.mot.com/SPS/HPESD/prod/coldfire/5307UM.html) to obtain 
information on the mechanical characteristics of the MCF5307 integrated microprocessor. 


19.1 PACKAGE 

The MCF5307 package is a 208-pin, thermally enhanced QFP. Thermal characteristics are 
not yet included in this documentation. 

19.2 PINOUT 


The MCF5307 pinout is detailed in the following tables. The table consists of pin number, 
primary and secondary pin functional names, direction (I/O), and a brief description of the 
pin. Additional columns indicate the output drive capability of each pin, whether it is 
internally sychronized, and if the signal can change on a negative clock transition. 
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4 
Te 


MECHANICAL DATA 


19.3 PINOUT TABLES 
Table 19-1. Pin-Out Table (Left, Top to Bottom) 


FUNC FUNC | FUNC DRIVE 














EE RS 2 a ea REE (Re ala mR (in Pes 
| Ao_| RODRIG [=| aaress bas ot [~~ [= [Sora 
[At [ADDR] [=| Wo Adress Bus bt| 8 [>| SDRAM 
A 
VO | __Raaress Bus bi | 8 |= |S RAW, 
[AB | ADDRIS] [=| Wo] adress Bus bt | 8 |_| SDRAW 
veo WD 
[Aa [ADDR] [=| VO | Ares Bust ——| 8 [= [SRAM 
8 [a8 [ADDIS] [=o aress Bus bi | “8 |= | SDRAM 
GNO_[ GND 
ip AS [RODRIG] [=| WO | ares Bost _——~| “8 | = |S RAW 
2 [a7 | ADDRI] [=| Yo_| Adress Bus bh_—| 8 |= | SORAW 
(| NOCH MOO 
LE OS 
5—| "Ad | ADDR] |__| VO | Adress Bus bt_——| 8 [= [SDRAM 
6 [-AfO_| ADDATTO|_[ [Yo Aaress Bus bt | 8 > [SRAM 
7 [GNC [ ND 
Rit_|ADDAITA]_| ~~ | WO] Ares Bust | 8 [= [SDRAM 
e_[“Aie| —ADDALI) [>| 10] Address Bust | 8 | _- | SORAW 
is | ADDR] [=| VO] Adress Bus bi_[ 8 [>| SDRAW 
Eo OO 
Ria_| ADDR |_- | VO_[ Adress Bust | 8 | = [SRA 
23 | ATs | ADDATIS| |= | VO [Adress Bus bt ~8 [~~ [SDRAM 
Rié_[~ADDRITe] || VO| Address Bust | 8 | _-_|SDRAM 
a5 [ ND [GND fp 
Ri7_|~ADOAR7] [=| VO] Adress Bust | 8 |= | SRAW 
a7 | Até| ~ADDRITG)_|~—= | WO | Adress Bus bt |_| = [SDRAM 
ig_|~ADDAIIS]_ |__| YO| Address Bus bt__| 8 | ~~ [SDRAM 
woo] wo PP 
pe0_| ADDR] |= [VO | Adress Bus bt | 8 |= | SRAM 
et [Ae | ADDR] = [YO | Adress Bus bt [8 [= [SDRAM 
ee | Raz | ADDR] = [WO | Adress Bus bt [=| SDRAM 
GND_[ GND 
ef [Raa | RODRIG, [=| 10 | ——“aaress Bus bt | “8 |= [ SDRAM 
PP8 /O | Parallel Port bit/Address Bus bit | 8 |  - [SDRAM 
e6_|PPe_|——PP[a]__|ADDRI28]_|~VO_| Parallel Por bivaddress Bus bt| 8 [~~ [SDRAM 
Wee WO a ee ee 
ge_| PPro | ——PP[To] | ADDRIBE]_| 70 | Parale Port bivAdcress Bus br 8 |= | SDRAM 
PPT 70 | Parallel Port bivAdcress Bus bt | 8 | ~ [SDRAM 
a0_| pPt2 | PP(i2|_|ADDRI28]_| VO__| Parallel Por bvAddress Bus Bt] 6 | -_|SDRAM 
eND-[ GND 
a2 | PPts | PP(Ta]__| ADDAIBS]_| VO | Parallel Port badaress Bus BI [~~ [SDRAM 
\43 | PP14 ADDR{[30] /O | Parallel Port bit/Address Bus bit | 8 | -  |SDRAM| 
ADDR[31] /O | Parallel Port bit/Address Bus bit | 8 |  - | SDRAM] 
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Size Attribute 
Size Attribute 


Output Enable for Chip Selects 
Chip Select 
Chip Select 
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Table 19-2. Pin-Out Table (Bottom, Left to Right) 


FUNC FUNC DRIVE 
eee 


[ee Sl La [ae ae ee eae ener ie ey 
Ba [ese [xcs] [| Ohi Select Pes 
css [xcs] ff Of Chip Select es 

osx [xcs] [| Of Chip Select ves 
Vee | VOU s ee Ne ee ee ee 
ee [css | xs] [| Ohi Select es 
oss | xcs] [=| Of Chip Select Tes 

joo | es7 | xesi7] [=O [Chip Select es 
GND OND ee ee es 
ex [AS | xAS || VO [Adress Stiobe [8 [Yes | Yes 

es RW RW Reads 
ex [TK [xT WO TransterAcknowiedge [8 ff 
Fa a (A Dm (eg 
es [Ts ts Of anster Start 
er [Rem | xest Reset ves 
jes | Ray | xno Tnterrupt Request [| Yes | 
eer GN POND eee elec 
70 | TRO | XIRGIS] | XIRGL] || Interrupt Request [| ves [| 
i | TRas | xIRO[s] [XIE] | [Interrupt Request |= [Yes |= 
va | ROT | xIROU | xROR] [| InteruptRequest [=| ves [= 
fer | NOG | NODE ee ee 
ma [BR] BRO Bus Request 
7 [BD BDO Bus Dives 
ref Be BG es rant 
GND [GND 
Tourt [Tour [OTe output 
TouTa | Toury [Of Timer Outpt 
eo [No] TINO Timer input 
SL 2 RO 
LSE 0 ae Re Es LC 
jas | RASO_|XRAS(] [= [0 | DRAM Row Address Sttobe | 16 | [SDRAM 
ea | Rast | xRASII] |= | 0 | DRAM Row Address Strobe [16 |= [SDRAM 
GN] ONO el ee ed 
es | CASO | XCASI] [= [| DRAM Column Address Strobe | “76 [=| SDRAM 
7 | CAST | XCASiT [= [| DRAM Column Address Strobe [16 [= [SDRAM 
jee | CAS2 | XCASI] [= [0 | DRAM Column Address Strobe [16 | - | SDRAM! 
Ec = A! a 
so | cass | XcASs] [= [0 | DRAM Column Address Strobe [16 | - | SDRAW' 
pi [DRAM | XDRAMW [= [0 | DRAMWite [te [= [SDRAM 
2 | SRAS "| XSRAS [= [0 _| SyncDRAM Row Address Strobe [16 | | SDRAM] 
GSI RC =e a PR naga 

Strobe 

pS | SCKE | SCKE [= [0 | SyncDRAWClockEnable | 16 | - | SDRAM 
os [ BED | XBE(o]_ | XBWE[O]_[ 0 | Byle Enable /Byte Write Enable |B | = [=| 
(R= a a a a ACN 


<o) 
1 
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FUNC DRIVE 
grins | em | o_o] __seneon en fom 


| XBWET] | e | Byte Enable / Byte Write Enable | e Write Enable 


se BEE | WBE) | NEWEIay_[ “| Bie Erato Byte Wr Era | 8 [| > 
Fi00_| BES | —XBEIS] | “XEWET]_[—O | Byte Enable Byte Write Enable [8 [= [| -_| 













ior | GND[ GND TCU 
fio [Sct [ Sct |__| Woo | Serial Crocktine [8 | ves [= 
ji0s_| SDA [SDA [=| W0D-| Serial Data ine [8 [ves [= 
aNOD | IGN 





OD - Open-Drain Ouput 
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Table 19-3. Pin-Out Table (Right, Bottom to Top) | 


PIN FUNC | DRIVE 
|_| name | emma | ono |‘om | DESCRIPTION ay [SYNC | NES 


PU cle ee nt os eats Nb PSI Ae oe aes ees ge Pe ss cdl 
05] DATAST | DATA] [>| WO] ata Bas 8S 
[707 | DATASO | —DATASO) [>| WO [Data Bus | “8 | = SRAM 
708 [DATAZS | —DATAO] [=| WO | Data Bus | 8 [= JSAM 
Fa] GND [NDP 
T10 | DATAZS | DATA26]—[—_= [WO | Data Bas | 8 | |S RANT 
FAT [DATART | DATAe7] [=| YO | Data Bus“ > |S RAM 
Fi2| DATAZS [DATA] [=| WO [Data Bus | 8 |= SRA 
fap vee [vo 
¥¥4 [DATARS | DATAE] [=| WO | ____ bata Bus | 8 [|S Ra 
Fi5| DATARE | —DATAa] [=| WO [Data bus | 8 [> [SDRAM 
"76 | DATAZS | DATA] |__| WO[__DataBus__ [8 > [SDRAM 
AT] GND [GND 
V9 DATAZZ | DATAT@2] [= [WO [ ata Bas [8 |= |S RANT 
DATABT | DATA] [=| VO[DataBus_ [8 [= |SDRAW 
120 [DATA2O | —DATAO] [=| WO[___DataBus__ |B > [SDRAM 
faiy veo [wap fp 
122 DATATO | DATAT]_[ =| WO[ Data Bus | 8 [> SDRAM 
DATATe|DATATT@]_ [=~ | VO_[__DataBus_ | 8 |= _|SDRAM 
124 | DATAT7 | DATA] [=| VO[___DataBus | 8 [= [SDRAM 
2S ONDE ie OND a ee ee ee ee 
126 | DATATS | DATATTO]_[ >| VO-|___DataBus__——— | 8 |= _|SDRAW 
fev DaTATs | ~DaTatis] [=| WO[___Databus [8 |= [SDRAW 
128 [ DATATA | —DATATTa [=| YO[__DataBus___| 8 |_=_|SDRAM 
feap vec [vob 
190 | DATATS | DATA] [= [VO [babs [= |SDRAM 
rai [DATA | DaTati2] [= [WO [ Data Bus = SRAM 
re2[DATATT [DATA ]_[ >| VO-[___DataBus_——_‘[8_[_=_ [SDRAM 
fe3[ GND [GND 
(34 | DATATO|—DATAO]_| =| VO_[ DataBase [8 [= [SDRAM 
735 | DATAS [DATA] [=> [0 | Data Bus =| SRA 
136 DATAS | DATAfe] [>| YO-[____DataBus [8 [= _|SDRAM 
0d ic 
138 | DATA? TO | “Data Bus / Chip Select Config_[ 8 [Yes 
TO | “Data Bus Chip Select Config_| 8 | ves [SDRAM 
140| DATA5 /O Data Bus / Chip Select Config Lee Yes 
faty GND [ND 
(42 DATAa | DATA] [ADDRCONF| VO | Data Bus Adar Config__| 8 _| Ves 
VO | Data Bus /Freq CrIPLL_[8 | Yes [SDRAM 
144 | DATAD yO [Data Bus Freq CwIPLL | ~8 | Yes 
oc 
146 DATA TO [Data Bus /Dvde CHI Pak To Bok |B | Ves 
DATAG TO [Data Bus /Divde Cul Pokto Bak | 8 | ves [SDRAM 
wey GND [ND Ur 
149} DSCLK | DSCLK {| TRST | I {| Debug Serial Clock / JTAG Reset | - | Yes = ee al 
W50[ TOK [TOK [TCR CTs 
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FUNC 


salve [vO 
isa] DSI_[Dsor | __TOr__|_1_[Debug Serial mput/JTAG Datatn[ = [Yes [= 


1541 BKPT XBKPT Ramee Debug Breakpoint /JTAG Mode 
Sel 


High impedence Override [~~ 
ee 
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Table 19-4. Pin-Out Table (Top, Right -to- Left) 


FUNC FUNC. | DRIVE 
|__| same _| priwary |seconoany| om | DESCRIPTION "gig | SYNC | NEG 


ag eM cee ee el eee ee ee a ee eee ee 
fee | crse | ors fT UART Clearto-Send [TT 
to [ATs2[RTS2 [=| O|UART RequestTo-Send [8 [= 
feo [Aba [XDA [ART Receive Data 
fer | txpz | txD2 [TO UART TransmitData [8 fT 
N62 GND | GND ee ee ee 
fe [erst | orst [UAT Clearto-Send [= 
fea [aTst [aTst [= [| UART RequestTo-Send |e [= 
es | RXDT | AXDT [TT UART Receive Data [= 
ee | TKOT [xD OAR T TiansmitData 8 
wer [vor woo 
Select 
HL SL = (A a (I GE 
70 [BCLKO | BCLKO | | O|SystemBus Clock [ef 
rae NR a ae ne RT Oe A 
iz | RSTO | XRSTO |= [0 [ ProcessorReset Output [8 [= 
ara [GND [GND 
74 | CLKIN [CLKIN, [= System Glock input (Fin) [= 
meas NCCE OO ee 
176 | MTMODO | MTMODI] [= || MotorolaTestWodebit [= [| 
77 | wTMoDT | MTMODIY [= [1 [ MotorolaTest Mode bit [=== 
7 | GND [PGND [=| =| Analog Ground torPLt [= 
pra {NC = Aralog Test Point for PLE |= P= 
feof vec | PvoD |= [Analog PowertorPLL [= T= 
fet_[wTwoD2 | MTMODe] |= [| Motorola Test ode bt 
rez_[wrwoDs | MTMODIs] |= [1 | Motorola Test Mode bit [P= 
FI (aN l= et 0 a 
ea | PSTCLK | PSTCLK [= [0 | Processor Status Clock [8 [=| | 
OSC CC NODE ie ee I ed 
186 | DDATAO | DDATA] [=O [Debug Databi7Bist Data bit] B= 
fe7 | DDATAT | DDATA] [= [| Debug Data bit/Bist Data bit] @[-T 
ree GND TGND 
feo | DbATA2 | DDATAT |= | O[ Debug Databit/BistDatabitl 8 [== 
ff90 | DDATAS | DDATAIS] [=| O [ Debug Data bit7BistDatabit| 8 [= [| 
veo MO oe Se ee 
i aa Da a lel lel a 
Done 
eee pee EE eee 
Fail 
Fi I a (en GR 
fea | psta [Pst] | [0 Debug ProcessorStatus [8 [= 
fe [sts [sts] [| O|DabugProcessorStatus [8 [= |= 
fova|e NOGr VOD A ie eee 
fea [Py | PPI | XTIP [VO | ParalleiPortbtyxtp [8 [= T 
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MECHANICAL DATA 


PRIMARY SECONDARY (MA) 
D DREQIC O) Parailel Port dit / DMA 3 
Request 
Eee A ee ee ee 
















/O Parallel Port bit / Transfer 
Modifier 


ial 
/0 Parallel Port bit / Transfer 
Modifier 
bead 
Poe 
ea 
i 


PP[3] 





GN 
Modifier 
Oe 
[PPL [TT |W 
2 





[PPO 
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APPENDIX A 
REGISTER MEMORY MAP 


The following lists several keynotes regarding the Register Memory Map table: 


e Bold letters mark registers that are restricted to supervisor access. While in user mode, 
supervisor access registers can not be written. It a supervisor register is written to in 
user mode, the contents of the register will not be changed. If a supervisor register is 
read in user mode, the data from the register will be valid. 


e Underlined letters mark registers which are status or event registers. In these registers, 
the SBC sets the bits and the users clear the registers. To clear a bit, the users must 
write a one to that bit location; writing a zero has no effect. 


¢ Normal letters mark registers which have accesses controlled by the address space 
mask bits contained in the MBAR register (see next section). 


e Addresses not assigned to a register and undefined register bits are reserved for future 
expansion. Write accesses to these reserved address spaces and reserved register bits 
have no effect. 


Table A-1. Register Memory Map 
ADDRESS | —SsSNAME ~—S—Ss«——=CiBY EO BYTE BYTES 


NET 
WSR 
MBAR + $004| Pin AssignmentReg |___PAR__—_—_+|_IRQPAR | Reserved 
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REGISTER MEMORY MAP 


Table A-1. Register Memory Map (Continued) 





[ADDRESS | ~~—=NAME ~—~—~—=«(Y_~—=séwYTeO | BYTE1 | BYTE? | BYTES 
MER Soo] 
PwBAR+Soa[ 
fwBaR+ soe] SSSCSC~* 

MBAR SOIC] SSCS 

MBAR S00] CS 

wBAR+S04[ Reserved 

wBar+so2e[ 

MBAR +So2C] CS 

MBAR soso] 

PwBaR saa] 

MBAR sae[ 

[MBAR SOIC] 

[MBAR +8040 | —__Inferupt Pending Reg | SSCS 

(MBAR +044] ___InteruptMaskReg WR 

war soe, CS 

MBAR S05C] CS = 

MBAR s060[ 

MBAR soee[ CS 

wear +sosa[ ees 

MBAR SOBC] 

MBAR soo, SSC~* 

PwBARYSO7e[ 

PweaRrso7e[ 

PMBARY SOE] 

MBAR +S090[Chip-SelectMaskRegi[_——=SssS~C~SRTC* 

Chip-Select Base Address Reg 

PMBARYSoAa[ SS dYSSSC~“~‘~*~*~*~‘UR SOC 

PMBAR+S0BO[ | SSSCSC~“~‘SR OCS 
ae) 

fMBAR+S0BC] = SCdSCSSC‘“‘“*‘~*~*~‘ ROS 
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REGISTER MEMORY MAP 


Table A-1. Register Memory Map (Continued) 
[ADDRESS [—SsSNAME =—Ss—~=*«CY*SC‘éRsYTEO | BYTE’ | eYTe? | GVTES 


MBAR + $0CO Chip-Select Mask Reg 5 | CO CSMRE 
Reserved 
MBAR + $0C4 Chip-Select Control Reg 5 | = SC CSCRE 
















MBAR+S0C@) Reserved 
MBAR + $0CC Chip-Select Mask Reg 6 
; Reserved 
MBAR + $0D0 Chip-Select Control Reg 6 


MBAR+$0D4;00 eC Reserved 
MBAR + $0D8 Chip-Select Mask Reg 7 CSMR7 
Reserved 


ERT WOGC| Chee ConrarRen7 | TUOMM CSR? 
[MEAR®S0EO[ i 
[MBAR S0E@[ 
PMBARYSOEB[ 
(MBAR +S0EC[ 
Reserved 

[MBAR SOO. 
PMBARSSOF@[ 
[MBAR SSOFE[~ CS 
[MBARYSOFC[SCSC*d 
Reserved 
MBAR S104[ OO SC*«SSSCS~C~—CSCSCS~SR SOV 
[MBAR+S10C[DRAMCWaskRegO [CMR 
ORAMGMaskRegi [SCM 
PMBARSSHIC[ 
[MBARYSI20[~ 
PMBARYS124[— 
PMBARSSI26[ ae 
[MBAR S726[ 

a aa 

aa Aa 

De teen sl 

a ere 

| __TimerMode RegQ | 
















Timer Mode Rego 
Reserved 
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REGISTER MEMORY MAP 


Table A-1. Register Memory Map (Continued) 


ADDRESS [NAME ——~«|~—=éBYTEO | _BYTEN BYTES 


PMBAR+ S184. 
MBAR + $158 | 
MBAR + $15C 
MBAR + $160 
MBAR + $164 
‘MBAR + $168 
MBAR + $16C 
“MBAR + $170 
MBAR + $174 
MBAR + $178 
MBAR + $17C 
MBAR + $180 
-MBAR + $184 
MBAR + $188 
‘MBAR + $18C 
MBAR + $190 
_MBAR + $194. 
MBAR + $198 
‘MBAR + $19C 
MBAR + $1A0 
MBAR + $1A4 
MBAR + $1A8 
‘MBAR + $1AC 
MBAR + $1B0 
MBAR + $1B4 
MBAR + $1B8 
MBAR + $1BC 





Reserved > 


Timer Wodo Rog 
Timer Reference Reg 1 
Timer Capture Reg 1 
Timer Counter 1 
Timer Event Reg 1 


a 


MBAR + $1C0 UART Mode Reg 0 
MBAR + $1C4 | UART Status 0/Clock Select Reg 1 
MBAR + $1C8 UART Command Reg 0 
MBAR + $1CC| UART Receive 0/Transmit Buffer 0 
MBAR + $1D0 | UART Change 0/Aux Control Reg 
MBAR + $1D4 
MBAR + $108 |UART Baud Rate Generator MSB's 0] UBGIO 
MBAR + $1DC 
[WBAR+SIE4; CSC 
[MBAR+S1E8] dc 
MBARSSIEC[ CS 
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Reserved 


Reserved 
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REGISTER MEMORY MAP 


Table A-1. Register Memory Map (Continued) 






















ADDRESS | —SsSNAME——S«|—=«éBYTEO BYTE! BYTES 
y UBG11 | 
Do 








UART Mode Reg 1 TUMRIV/UMRO1| 222 | 
UART Status 1/Clock Select Reg 1 | USR1/UCSR1 
UART Command Reg 1 UCRI 
UART Receive 1/Transmit Buffer 1 | URB1/UTB1 
UART Change 1/Aux Control Reg 1 | UIPCR1/UACRI1 
UART Interrupt Status 1/Mask Reg 1] UISR1/UIMR1 
UART Baud Rate Generator MSB’s 
UART Baud Rate Generator LSB’s 
Reserved 
Not 
Access 
UART Interrupt Vector Reg 1 UIVR1 
UART Input Port 1 
UART RTS Output Port 1 
UART Output Port 1 


MBAR + $240 


MBAR + $244; Parallel Port Data Direction Reg PADDR pees 
MBAR + $248 Parallel Port Data Reg PADAT | 


[MBAR + $274 


Mbus Address Reg 
Mbus Frequency Reg | MFDR | 
Mbus Control Reg Reserved 
ous Siatus Reg | WBS 
bus Data Re 


Reserved 
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ADDRESS 
MBAR + $294 
MBAR + $298 
MBAR + $29C 
MBAR + $2A0 
MBAR + $2A4 
MBAR + $2A8 
MBAR + $2AC 
MBAR + $2B0 
MBAR + $2B4 
MBAR + $2B8 
MBAR + $2BC 
MBAR + $2C0O 
MBAR + $2C4 
MBAR + $2C8 
MBAR + $2CC 
MBAR + $2D0 
MBAR + $2D4 
MBAR + $2D8 
MBAR + $2DC 
MBAR + $2E0 
MBAR + $2E4 
MBAR + $2E8 
MBAR + $2EC 
MBAR + $2F0 
MBAR + $2F4 
MBAR + $2F8 
MBAR + $2FC 
MBAR + $300 
MBAR + $304 
MBAR + $308 
MBAR + $30C 
MBAR + $310 
MBAR + $314 
MBAR + $318 
MBAR + $31C 
MBAR + $320 
MBAR + $324 
MBAR + $328 
MBAR + $32C 
MBAR + $330 
MBAR + $334 
MBAR + $338 
MBAR + $33C 
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_ REGISTER MEMORY MAP 


Table A-1. Register Memory Map (Continued) 


DMA Source Add Reg 0 
DMA Destination Addr Reg 0 
DMA Control Reg 0 


BYTE1 BYTE2 BYTE3 








Reserved 


DARO 


DCRO 
Reserved 
DMA Byte Count Reg 0 BCRO 


DMA Statue Reg 0 
DMA Vector Reg 0 


~ DIVRO 





Reserved 
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Table A-1. Register Memory Map (Continued) 
[ADDRESS [| —~—=ONAME”~=—-—~=~=*«<«CE*WN BYEO | BYTE’ | BYTE? | BYTES 












MEAR+ S340 | DMASouceAddRegt | SARTO 
MBAR + $344 DMA Destination Addr Reg 1 
MBAR + $348 DMA Control Reg 1 DCR1 

Reserved 
MBAR + $34C DMA Byte Count Reg 1 BCR1 


MBAR + $350: DMA Statue Reg 1 
MBAR + $354 DMA Vector Reg 1 
MBAR + $358 
MBAR + $35C 
MBAR + $360 
MBAR + $364 
MBAR + $368 
MBAR + $36C 
MBAR + $370 
MBAR + $374 
MBAR + $378 
MBAR + $37C 
MBAR + $380 
MBAR + $384 
MBAR + $388 
MBAR + $38C 
MBAR + $390 
MBAR + $394 
MBAR + $398 
MBAR + $39C 
MBAR + $3A0 
MBAR + $3A4 
MBAR + $3A8 
MBAR + $3AC 
MBAR + $3B0 
MBAR + $3B4 
MBAR + $3B8 
MBAR + $3BC 
MBAR + $3C0 
MBAR + $3C4 
MBAR + $3C8 
MBAR + $3CC 
MBAR + $3D0 
MBAR + $3D4 


Reserved 
DIVAI eaiii 


Reserved 


DMA Source Add Reg 2 
DMA Destination Addr Reg 2 
DMA Control Reg 2 
DMA Byte Count Reg 2 
DMA Statue Reg 2 
DMA Vector Reg 2 


Reserved 
BCR2 


Reserved 


DMA Source Add Reg 3 


DMA Destination AdcrRegS | __—=—S—S~SARSC*” 


DMA Control Reg 3 DCR3 
Reserved 
DMA Byte Count Reg 3 BCR3 


DMA Statue Reg 3 | DSRS Sear 
DMA Vector Reg 3 DIVAS 
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_. Table A-1. Register Memory Map (Continued) 






MBAR S308] 
MBAR + S80C[ 
[MBAR +830 
[MBAR S34, SS 


MBAR + $3E8 
MBAR + $3EC 
MBAR + $3F0 


MBAR SOFA[ 

































Reserved 


MBAR + $3F8 
MBAR + $3FC 
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APPENDIX B 
MCF5307 MEMORY MAP SUMMARY 


This table below is a summary chart of the entire memory map for the MCF5307. 


Table B-1. MCF5307 User Programming Model 


ADDRESS | NAME | WIDTH DESCRIPTION RESET VALUE | ACCESS 


MBAR+$000 | RSR [| 8 | RESET STATUS REGISTER $80 OR $20 | RW | 
MBAR+$001 | SYPCR SYSTEM PROTECTION CONTROL REGISTER 


MBAR+$002 | SWIVR SOFTWARE WATCHDOG INTERRUPT VECTOR $0F 
REGISTER 














| 8 
Ea 
MBAR+$003 | SWSR | 8 | SOFTWARE WATCHDOG SERVICE REGISTER | _uninitialized 
PAR | 16 | ~~ _PINASSIGNMENTREGISTER —s|_ = $0000, || RW_| 
MBAR+$006 | IRQPAR| 8 | ~~ INTERRUPTASSIGNEMENTREGISTER | $00 |, RW_| 
PLLCR | 8 | ~~ ~PLLCONTROLREGISTER | 800 | RW 
MARBCR| 8 | ~~ MARBCONTROLREGISTER |S $00 |S RW __ 
aA eae | aR APR aeRO eres nee 
MBAR+$040 | IPR | 32 | _INTERRUPTPENDINGREGISTER | _$00000000 | RW_ 
MBAR+$044|~ IMR | 92 | __INTERRUPTMASKREGISTER | SO000FFFE | RW _| 
AvcR |8 | AUTOVECTORCONTROLREGISTER [| —-$00_—=«|_-~RW_ 
MBAR+04C| ICRO [8 | INTERRUPTCONTROLREGISTERO | _—-$00_—=«|_~-RW_ 
MBAR+$04D| ICRI | 8 | INTERRUPTCONTROLREGISTER? | __—-s00_—=«|-—«wRW_| 
icR2 | 8 | INTERRUPTCONTROLREGISTER? | —-$00_-=«|_=sRW_| 
MBAR+S04F | ICR8_| 8 | INTERRUPTCONTROLREGISTERS | _—-s00_—=«|_«sRAW_| 
MBAR+S050| ICR4 | 8 | INTERRUPTCONTROLREGISTER4 | _$00_—«||~-RW_| 
(CRS_| 8 | INTERRUPTCONTROLREGISTERS | __-$00_—=«|_—«aRAW_— 
iCRé_ | 8 | INTERRUPTCONTROLREGISTERE | _—*$00_—=S=s«|_sRW_ 
MBAR+$053 | ICR7 | 8 | INTERRUPTCONTROLREGISTER7 | _$00_| RAV 
icR8_| 6 |  INTERAUPTCONTAOLREGISTERS | _—~s00_~—=«|_=«RW_| 
MBAR+$055| ICRO [8 | INTERRUPTCONTROLREGISTERS | _$00_—«|_~-RAW_ 
MBAR+S056[ ICRI0 | 8 | INTERRUPTCONTROLREGISTER10 | _-$00_—=«|--«sRAW_ 
MBAR+S057 | ICRI | 8 | _INTERRUPTCONTROLREGISTER11 | _—-$00__—~«|_- RAW 
Fe sae ee ae ae ee eg ee ee lee llc 
MBAR+8080 | CSARO 
MBAR+$084 Raa Bane CHIP-SELECT 0 MASK REGISTER ae 
16 CHIP-SELECT 0 CONTROL REGISTER uninitialized R/W 






koxcent 

BEM=BSTR=BS 
W=0) 

MBAR+$08C | CSAR1 CHIP-SELECT 1 BASE ADDRESS REGISTER | _uninitialized | 


MBAR+$090 | CSMR1 32 CHIP-SELECT 1 MASK REGISTER uninitialized 
(except V=0) 


MBAR+$096 | CSCR1 CHIP-SELECT 1 CONTROL REGISTER uninitialized 


(except 
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BEM=BSTR=BS 
W-=0) 


= 
es 
> 
me) 
+ 

P 
ro) 
0 
> 
QO 
oP) 
O 
D 
ro) 








MCF5307 MEMORY MAP 


Table B-1. MCF5307 User Programming Model 


ADDRESS WIDTH DESCRIPTION RESET VALUE 


MBAR+$098 
MBAR+$09C 











CHIP-SELECT 2-7 BASE ADDRESS REGISTER 
16 CHIP-SELECT 2 MASK REGISTER uninitialized 
(except V=0) 


CHIP-SELECT 2 CONTROL REGISTER Feo 
Exce 


CSBA 
CSMR2 


me) 


BS) 


MBAR+$0A2 | CSCR2 16 





t 
BEM=BSTR=BS 
W=0) 


16 CHIP-SELECT 3 MASK REGISTER uninitialized 
| (except V=0) 


16 CHIP-SELECT 3 CONTROL REGISTER uninitialized 
except 
BEM=BSTR=BS 
W=0) 
16 CHIP-SELECT 4 MASK REGISTER uninitialized 
(except V=0) 
16 CHIP-SELECT 4 CONTROL REGISTER uninitialized 
ee 
BEM=BSTR=BS 
W=0) 


16 _  CHIP-SELECT 5 MASK REGISTER uninitialized R 
(except V=0) 
16 CHIP-SELECT 5 CONTROL REGISTER uninitialized 
eee. 
BEM=BSTR=BS 
W=0) 


MBAR+$0AA | CSMR3 


BS) 


QO; O 2) 
” ” op) 
QO; =s QO 
Di D D 
Bi) BR oe) 


=< 
iss) 
> 
mu) 
+ 

F 
© 
> 
m 






MBAR+$0BA 





D 
+ 

ro) 
QO 
) 
'®) 
” 
= 
m8) 
on 


=| =& 
ee OO 
> > 
D 
+ 
fl aA 
a) 
QO 
o 
QO 
” 
QO 
Be 
a 





CHIP-SELECT 6 MASK REGISTER 


R+$0CE | CSMR6 16 uninitialized 
(except V=0) 
16 CHIP-SELECT 6 CONTROL REGISTER uninitialized 









except 
BEM=BSTR=BS 
W=0) 


16 CHIP-SELECT 7 MASK REGISTER | uninitialized 
(except V=0) 


16 CHIP-SELECT 7 CONTROL REGISTER uninitialized 






> 
m8) 
+ 

oO 
O 
> 
O 
2) 
= 
DD 
~] 


WO WW WW 
> > 
ae) 

+ + 
ras fl 
O° 
O 
nm 
O 
op) 
m8) 
o>) 


> 
me) 
+ 
ro) 
0 
m 
9) 
dP) 
O 
Be) 
“J 








MBAR+$ R/W 
coxcept 
| BEM=BSTR=BS 
| W=0) 

MBAR+$100 | DCR 16 DRAMC CONTROL REGISTER uninitialized R/W 

(except [15] = 0) 
MBAR+$108 | DACRO | 32 DRAMCO ADDRESS & CONTROL REGISTER uninitialized R/W 

| (except [15] = 0) ; 

MBAR+$10C | DMRO | 32 DRAMCO MASK REGISTER uninitialized R/W 

(except [0] = 0) 
MBAR+$110 | DACRi | 32 DRAMC1 ADDRESS & CONTROL REGISTER uninitialized R/W 
| 7 | (except [15] = 0) 
MBAR+$114 | DMR1 | 32 DRAMC1 MASK REGISTER uninitialized R/W 

(except [0] = 0) 
MBAR+$140 | TMR1 TIMER1 MODE REGISTER $0000 
MBAR+$144 | TRR1 16 TIMER1 REFERENCE REGISTER $FFFF 
MBAR+$148 | TCR1 TIMER1 CAPTURE REGISTER 3 $0000 860 | 6 6UR 
MBAR+$14C TIMER1 COUNTER RETGISTER $0000 
MBAR+$151| TERI | 8 | TIMER1 EVENT REGISTER 
MBAR+$180 | TMR2 TIMER2 MODE REGISTER $0000 
MBAR+$184 | TRR2 TIMER2 REFERENCE REGISTER $FFFF 
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Table B-1. MCF5307 User Programming Model 




















LADDRESS | NAME | WIDTH] __DESCRIPTION_| RESET VALUE | ACCESS 
Rs Te 6s il ze Ee IS Soe ed 
MBAR+$18C | TCN2 | 16 |  TIMER2COUNTERRETGISTER | $0000 | RV 
TeR2 | 8 |  TIMER2EVENTREGISTER | $00 | RAW 
RR |S: RE REL eeees ee Cee ee 
MBAR+SiCO| UMR17 [8 | __~_—*UARTIMODEREGISTER———|_—=«8'00 
UMR21 | UART1 MODE REGISTER | = $00] RW CO 
MBAR+S1C4| UCSRI | 8 | _UAATICLOCKSELECTREGISTER | —$0D_~—S—s|_—SsW 
MBAR:SiCB| UCRT | 8 | _UARTICOMMANDAEGISTER —_—«|__—_—*$00 
MBAR+SiCC| URBi [8 |  UARTIRECEIVEBUFFERREGISTER | SF | sR 
MBARYSICC] UTBi | @ |  UARTITRANSMITBUFFERREGISTER | _$00_—«| —~W 
MBAR+S1D0| UIPCRT| 8 | _UARTIINPUTPORTCHANGEREGISTER [| _$0F_—«|_—=R_| 
MBAR+SiD0| UACR7 | _8 | UARTIAUCILARYCONTROLREGISTER [| _$00_—=«|s—sW_—i 
MBARYSiD4| UISRT | 8 | UARTIINTERRUPTSTATUSREGISTER | $00 —=«|-s—sAR_| 
MBARS1D4| UIMRT [8 | UARTIINTERRUPTMASKREGISTER | ___-$00_—=S«|, Ss W_— 
UBG11 | 8 | UART1 BUAD RATE PRESCALE (MSB) REGISTER 
MBAR+$1DC| UBG2i | 8 | UARTi BUAD RATE PRESCALE (LSB) REGISTER | uninitiaized |W 
uiVAT |__8 | _UARTIINTERRUPTVECTORREGISTER | __—S0F_—=s«|_« RAW _| 
MBARSIF4| UIPT | 8 | _UARTIINTERRPUTPORTREGISTER | —oSFF_—s | _ 
MBAR+$iFC| UOPOI | 8 | UARTIOUTPUTPORTBITRESETREGISTER | uninitialized | W 
Saat (RAIN SNR Nc Ra Na SURE a UR OI EIS) 
MBAR+$200 | UMA12 | 8 | UART2MODEREGISTER | 800 | RW 
uMR22 | 8 | ~~ UART2MODEREGISTER | $00 |_| 
MBAR+$204 | USR2 | 8 |  __UART2STATUSREGISTER = | SS $00 | OA 
MBAR+$204 | UCSR2| 8 | UART2CLOCKSELECTREGISTER | SDD |W 
MBAR+S208 | UCR2 | 8 | _UART2COMMANDREGISTER | $00, |W 
MBAR+$200 | URB2 | 8 | _VART2RECEIVEBUFFERREGISTER | SFF_ | OR 
ure2 | 8 | _UART2 TRANSMIT BUFFER REGISTER | __‘$00 
MBAR+$210 | UIPCR2| 8 | _UART2INPUTPORTCHANGE REGISTER | SOF] OR 
VACR2 | 8 | UART2AUCILARYCONTROLREGISTER | ___—$00 
MBAR+$214; UISR2 | 8 | __UARTZINTERRUPTSTATUSREGISTER | $00, |_| 
MBAR+$214 | VIMR2 | 8 | __UARTZINTERRUPTMASKREGISTER __|___—$00 
MBAR+$218 | UBG12 | 8 __| UART2 BUAD RATE PRESCALE (MSB)REGISTER | uninitialized | W__| 
uBG22 | 8 | VART2BUAD RATE PRESCALE (LSB) REGISTER | uninitialized |W 
MBAR+$290 | UIVR2 | 8 | UART2INTERRUPTVECTORREGISTER | SOF | RAW 
vip2 | 8 | UARTZINTERRPUTPORTREGISTER | SFF_ | OR 
UOPO2 | 8 | UART2 OUTPUT PORT BIT RESET REGISTER 
sana Hauke Sema erie See 
MBAR+$244 | PADDR | 16 | PARALLEL PORTDATADIRECTION REGISTER | $0000 | RAW _ 
MBAR+$248 | PADAT | 16 | sO PARALLELPORTDATAREGISTER | $0000 | AW 
fetal iE ear Saar 

IMBAR+$280 | > ion toa | ~ wes asoaeee RRR —— ADDRESS REGISTER $00 a 
MBAR+$284 | MFDR | 8 |  -MBUSFREQUENCYREGISTER | $00 | RW _ 
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Table B-1. MCF5307 User Programming Model 














a 
O 
—| 
= 
=) 
m 
” 
oO 
a 
"~O 
= 
! 
=a 
JU 
m 
” 
m 
-_ 
> 
i 
— 
m 
H 
QO 
2) 
m 
” 
” 


| D| D Be) | UD} D Bs) | UD] D D| D| D 






ADDRESS 














MBARS280[ MBSR [8 | __ MBUSSTATUSREGISTER ‘| _—_$00_—_ 
MBDR [8 | _MBUSDATAREGISTER ——~+|_—_s00_— 
ee ee 
SARO 
pCRO | 16 | _DMACONTROLREGISTERO —+|~—$0000_~—+ 
MBAR+$300| BCRO [16 | _DMABYTECOUNTREGISTERO | $0000 
psnO | 8 [| _DMASTATUSREGISTERO __—_—+(|_—_$00 
MBAR:S314 | DIVRO | 8 | _DMAINTERRUPT VECTORREGISTERO | _$00 
eee ees es 

60000000 


2 
16 
16 
2 
00000000 
$0000 
$0000 
MBARS350[DSAT [6 | ___DMASTATUSREGISTER1 ‘| __$00 
pIVAY | 8 | DMAINTERRUPT VECTORREGISTERT | ___$00 
be ed 
SAR2 00000000 
00000000 
6] 
3 
oe 
— 
32 
16 
16 






MBAR+$388 | DCR2 DMA CONTROL REGISTER 2 $0000 
MBAR+$38C DMA BYTE COUNT REGISTER 2 $0000 
MBAR+$390 | DSR2 DMA STATUS REGISTER 2 


$00 
$00 





|_DMAINTERRUPTVECTORREGISTER2 | $00, | RW 
Sia Seen a ees eee eae 
DARS_| 92 | DMADESTINATION ADDRESS REGISTERS | _$00000000_| RW 
MBAR+saca| DcRs | 16 | _OMACONTROLREGISTERS ——=«|——«$0000—=«|=RW 
MBAR+$3CC| BCR3 | 16 | DMABYTECOUNTREGISTERS | ——-$0000_—*| = 
MBAR+S3CO| DSRS [8 DMA STATUS REGISTER 3 p00 OR 
_[MBAR+$3D4| DIVR3 | 8 | | DMAINTERRUPT VECTOR REGISTER 3 
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MCF5307 MEMORY MAP 


Table B-2 is a summary chart of the entire internal CPU memory map for the MCF5307. 
These registers are addressed with the MOVEC command. 


Table B-2. Summary Chart of MCF5307 Internal CPU Memory Map 































| ADDRESS | WIDTH| NAME | _—SDESCRIPTION _—=—_—|_—RESETVALUE | ACCESS | 
AGRO 
Access GontrolRegister? | _$0000000__|__W 
MBAR 


Table B-2 provides the internal location for the base registers and the cache control 
registers for the MCF5307. Most compilers and assemblers recognize the register name 
(i.e. MBAR, CACR) and will automatically place the correct internal CPU address in the 
op-code. There is no need to define the registers at their respective CPU address 
locations. Below are some examples of how the programmer would use the MOVEC 
command for the some of the above listed registers: 


;Example code: 
eee CRAM SHEP ss 
move.1 $00010000+1,D0 
movec DO, RAMBAR ;SRAM base = $10000 and set the V bit 


sbits [5:1] set to 0 
ke EMBAR SHTUP*** 


move.1 $10000000, D0 


movec DO, MBAR ;Module base = $10000000 and set the V bit 


sbits [4:1] set to 0 
;****VBR SETUP*** 


move. 1 $00200000, D0 
movec DO, VBR ;Interrupt vector base = $200000 
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accumulator (ACC), 3-11 
addressing mode summary, 3-20 
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BDM/JTAG signals 


test clock (TCK), 2-14 

test data input/development serial input 
(TDI/DSI), 2-14 

test data output/development serial output 
(TDO/DSO), 2-15 

test mode select/break point (TMS/BKPT), 

2-14 

test reset/development serial clock 

(TRST/DSCLK), 2-14 
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BRA, Bcc instruction execution times 
(table 3-16), 3-30 
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bus request, 2-7 


bus arbitration signals 


bus driven, 2-7 
bus grant, 2-7 
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accesses by matches in CS and DRAM control 
registers (table 7-5), 7-8 
bus and control signals, 7-1 
address bus, 7-2 
address strobe (AS), 7-3 
bus signal summary (table 7-1), 7-2 
data bus (D[31:0]), 7-3 
interrupt request (IRQ7, IRQ5, IRQ3, IRQ1), 
7-4 
read/write (R/W), 7-3 
transfer acknowledge (TA), 7-3 
transfer start (TS), 7-3 
bus arbitration, 7-25 
bus arbitration signals, 7-26 
ColdFire bus signal summary 
(table 7-7), 7-26 
bus driven (BD), 7-26 
bus grant (BG), 7-26 
bus request (BR), 7-26 
alternate master ownership state, 7-39 
three-wire bus arbitration protocol state 
diagram (figure 7-23), 7-38 
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three-wire bus arbitration with external 
to master control bit asserted 
(figure 7-22), 7-36 
multiple external bus master arbitration 
protocol (three-wire mode), 7-33 
three-wire bus arbitration protocol 
transition conditions (table 7-10), 
7-38 
three-wire implicit and explicit bus 
ownership (figure 7-21), 7-35 
reset state, 7-39 
two-master bus arbitration protocol 
(two-wire mode), 7-27 
alternate master ownership state, 7-32 
implicit ownership state, 7-33 
two-wire arbitration protocol state 
diagram (table 7-9), 7-32 
two-wire bus arbitration protocol state 
diagram (figure 7-20), 7-31 
two-wire bus arbitration protocol 
transition conditions (table 7-8), 7-32 
two-wire bus arbitration with bus 
request asserted (figure 7-18), 7-29 
two-wire implicit and explicit bus 
ownership (figure 7-19), 7-30 
two-wire mode bus arbitration interface 
(figure 7-17), 7-27 
bus characteristics, 7-6 
signal relationships to BCLKO (figure 7-1), 
7-6 
clock and reset signals, 7-5 
CF-bus signal summary (table 7-4), 7-5 
clock input (CLKIN), 7-5 
reset (RSTI), 7-5 
reset out (RSTO), 7-5 
system bus clock output (BCLKO), 7-5 
connections for external memory port sizes 
(figure 7-2), 7-7 
data transfer operation, 7-6 
data transfer operations 
back-to-back bus cycles, 7-14 
allowable line access patterns 
(table 7-6), 7-16 | 
back-to-back bus cycles (figure 7-9), 
7-15 
fast termination cycles 
read cycle with fast termination 
(figure 7-7), 7-12 


Index-1 


Index 


write cycle with fast termination 
(figure 7-8), 7-13 
line bus cycles, 7-15 
allowable line access patterns 
(table 7-6), 7-16 
line read bus cycles, 7-17 
line read burst (2-1-1-1) 
(figure 7-10), 7-17 
line read burst (3-2-2-2) 
(figure 7-11), 7-18 
line read burst-inhibited with fast 
termination (figure 7-12), 7-19 
line write bus cycles, 7-20 
line write burst (2-1-1-1) 
(figure 7-13), 7-20 
line write burst (4-2-2-2) with one 
wait state (figure 7-14), 7-21 
line write -burst-inhibited 
(figure 7-15), 7-22 
read cycle, 7-8 
read cycle flowchart (figure 7-3), 7-8 
write cycle | 
write cycle flowchart (figure 7-5), 7-10 
features, 7-1 | : 
interrupt exceptions _ 
interrupt acknowledge Bele: 7-24 
interrupt-acknowledge cycle flowchart 
(figure 7-16), 7-25 
level 7 interrupts, 7-24 
reset operation, 7-40 
master reset, 7-40 
master reset timing (figure 7-24), 7-41 
software watchdog reset, 7-41 
software watchdog reset timing 
(figure 7-25), 7-42 


write miss, 5-11 
caching modes, 5-9 
cacheable accesses, 5-10 
copyback mode, 5-10 
writethrough mode, 5-10 
cache-inhibited accesse,s 5-10 
copyback mode, 5-9 
MCF5307 unified cache block diagram 
(figure 5-1), 5-1 
memory accesses for cache maintenance, 5-12 
cache filling, 5-12 
cache pushes, 5-13 
push and store buffer bus operation, 5-14 
push and store buffers, 5-13 
writethrough mode, 5-9 
caching operation (figure 5-3), 5-3 
cache-inhibited, 5-9 
cache mode, 5-8 
chip-select module 
chip-select operation, 9-4 
chip-select module, 9-4 
general chip-select operation, 9-5 
8-, 16-, and 32-bit port sizing, 9-6 
accesses by matches in CS control 
registers (table 9-2), 9-5 
global chip-select operation, 9-6 
chip-select signals, 9-1 
output enable (OE), 9-1 
introduction, 9-1 
features, 9-1 
programming model, 9-7 
chip-select module registers, 9-9 
chip-select address register (CASRO, 
CSAR1, and CSBAR) 
chip-select 2-7 decoding 
(table 9-6), 9-10 
chip-select address registers 


Cc (CSARO, CSAR1, and CSBAR), 9-9 
chip-select control register 
cache (CSCRO-CSCR7), 9-13 
access control registers, 5-7 chip-select mask register 
cache coherency, 5-12 (CSMRO-CSMR7), 9-10 
cache control register (CACR), 5-5 code example, 9-15 
cache management, 5-8 — chip-select registers memory map, 9-7 
cache operation, 5-2 memory map of chip-select registers 
cache operation summary, 5-14 (table 9-5), 9-8 
cache line state diagram (figure 5-4), 5-15 timing diagrams, 9-16 a 
cache line state transitions (table 5-1), 5-15 chip-select module outputs timing diagram 
cache organization, 5-2 (figure 9-2), 9-16 
cache organization and line format chip-selects, 2-9 | 
(figure 5-2), 5-2 output enable (OE), 2-10 
cache protocol, 5-11 clock and reset signals, 2-7 
read hit, 5-11 _ clock input, 2-7 
read miss, 5-11 frequency control PLL, 2-8 
write hit, 5-12 reset, 2-7 
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system bus clock output, 2-8 
ColdFire core 
addressing mode summary, 3-20 
effective addressing modes and categories 
(table 3-5), 3-21 
branch instruction execution times, 3-30 
enhancements, 3-1 
bus clock at 1/2, 1/3, 1/4 processor clock, 
3-2 
change of flow acceleration, 3-5 
clock generation block diagram 
(figure 3-1), 3-2 
clock-doubled microprocessor core, 3-1 
debug module enhancements, 3-7 
enhanced pipeline, 3-2 
hardware multiply/accumulate and divide 
execution units, 3-6 
multiply/accumulate and divide block 
diagram (figure 3-4), 3-6 
illegal opcode handling, 3-6 
exception processing overview, 3-11 
exception vector assignments (table 3-1), 
3-13 
exception stack frame definition, 3-13 
exception stack frame form (figure 3-7), 
3-13 
fault status encodings (table 3-3), 3-14 
format field encoding (table 3-2), 3-14 
instruction set summary, 3-21 
MOVE long execution times, 3-26 
MOVE instruction execution times, 3-26 
MAC MOVE long instruction execution 
time (table 3-11), 3-27 
MOVE byte and word execution times 
(table 3-9), 3-26 
notational conventions (table 3-6), 3-21 
timing assumptions, 3-25 
misaligned operand references 
(table 3-8), 3-26 
instruction set summary (table 3-7), 3-23 
integer data formats, 3-18 
integer data formats (table 3-4), 3-18 
miscellaneous instruction execution times, 3-29 
miscellaneous instruction execution times 
(table 3-14), 3-29 
organization of data in registers, 3-18 
organization of integer data formats in 
memory, 3-19 
memory operand addressing 
(figure 3-10), 3-20 
organization of integer data formats in 
registers, 3-18 ) 
organization of integer data formats in 
registers (figure 3-8), 3-18 
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organization of integer data formats in 
registers (figure 3-9), 3-19 
trace exception, 3-16 
processor exceptions, 3-14 
access error exception, 3-14 
address error exception, 3-15 
debug interrupt, 3-16 
fault-on-fault halt, 3-17 
illegal instruction exception, 3-15 
interrupt exception, 3-17 
privilege violation, 3-16 
reset exception, 3-17 
RTE and format error exceptions, 3-16 
TRAP instruction exceptions, 3-17 
programming model, 3-7 
MAC programming model, 3-10 
accumulator (ACC), 3-11 
MAC status register (MACSR), 3-11 
MAC unit user programming model 
(figure 3-6), 3-10 
mask register (MASK), 3-11 
supervisor programming model, 3-9 
status register, 3-9 
status register (illustration), 3-10 
vector base register (VBR), 3-10 
supervisor programming model 
(illustration), 3-9 
user programming mode, 3-7 
user programming model 
address registers (AO-A6), 3-7 
condition code register (CCR), 3-8 
data registers (DO-D7), 3-7 
program counter, 3-8 
stack pointer (A7), 3-8 
user programming model (figure 3-5), 
3-8 
standard one operand instruction execution 
times, 3-27 
one operand instruction execution times 
(table 3-12), 3-27 
standard two operand instruction execution 
times, 3-28 
two operand instruction execution times 
(table 3-13), 3-28 
ColdFire2M, 3-10 
CPUSH instruction, 5-13 
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debug support, 16-1 
background debug mode (BDM), 16-6 
BDM command set 16-10 
BDM command set summary 16-10 
command set descriptions, 16-14 
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dump memory block (DUMP), 16-19 
fill memory block (FILL), 16-21 
no operation (NOP), 16-23 
read A/D register 
(RAREG/RDREG), 16-14 
read control register (RCREG), 
16-24 
control register map 
(table 16-5), 16-25 
read debug module register 
_ (RDMREG), 16-26 
definition of DRc encoding - 
read (table 16-6), 16-27 
read memory location (READ), 
16-16 
_ resume execution (GO), 16-23 
unassigned opcodes, 16-28 
synchronize PC to the PST/DDATA 
lines (SYNC_PC), 16-24 
write A/D register (WAREG/ 
WDREG), 16-15 
write memory location (WRITE), 
16-17 
write control register (WCREG), 
~ 16-26 
write debug module register 
(WDMREG), 16-27 
definition of DRc encoding-write 
(table 16-7), 16-28 
ColdFire BDM commands, 16-11 
BDM command summary 
(table 16-3), 16-11 
BDM size field encoding 
(table 16-4), 16-12 
command sequence diagram 
(figure 16-6), 16-14 
BDM serial interface, 16-8 
BDM serial transfer (figure 16-3), 16-8 
receive packet format ,16-9 
CPU-generated message encoding 
(figure 16-4), 16-9 
receive BDM packet (figure 16-4), 
16-9 
transmit packet format, 16-9 
transmit BDM packet (figure 16-5), 
16-10 
CPU hait, 16-7 
processor/debug module interface, 16-1 
processor/debug module interface (figure 16-1), 
16-1 
real-time debug support, 16-28 
concurrent BDM and processor operation, 
16-44 
Motorola-recommended BDM pinout, 16-44 
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(figure 16-8), 16-45 
programming model, 16-31 
address. attribute trigger register 
(AATR), 16-33 
address breakpoint registers 
(ABLR, ABHR), 16-32 
BDM address attribute (BAAR), 16-43 
configuration/status register (CSR), 
16-40 
data breakpoint register (DBR, DBMR), 
16-36 
access size and operand data 
location (table 16-10), 
16-37 
debug programming model 
(figure 16-7), 16-32 
program counter breakpoint register 
(PBR, PBMR), 16-35 
trigger definition register (TDR), 16-37 
theory of operation, 16-29 
debug module hardware, 16-30 
shared BDM/breakpoint 
hardware (table 16-9), 
16-31 
reuse of debug module hardware 
(Rev. A), 16-31 
the new debug module hardware 
(Rev. B), 16-31 
emulator mode, 16-30 
real-time trace support ,16-3 
processor status signal encoding, 16-4 
begin data transfer (PST=$8-$B), 16-5 
begin execution of an_ instruction 
(PST=$1), 16-4 
begin execution of PULSE or 
WDDATA instructions 
(PST=$4), 16-4 
example PST/DDATA diagram 
(figure 16-2), 16-5 
begin execution of RTE _ instruction 
(PST=$7), 16-5 
begin execution of taken branch 
(PST=$5), 16-4 
continue execution (PST=$0), 16-4 
emulator mode exception processing 
(PST=$D), 16-6 
entry into user mode (PST=$3), 16-4 
exception processing (PST = $C), 16-6 
processor halted (PST=$F), 16-6 
processor stopped (PST=$E), 16-6 
signal description, 16-2 | 
breakpoint (BKPT), 16-2 
Rev A functionality, 16-2 
Rev B enhancement, 16-2 
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16-3 
debug and test signals 
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DMA controller 
overview, 1-6 
DMA controller module, 13-1 
data transfer modes, 13-12 
dual address transactions, 13-13 
dual address writes, 13-13 
dual-address transactions, 13-13 
dual-address reads, 13-13 
single address transactions, 13-13 
DMA controller module functional description, 
13-13 
channel initialization and startup, 13-14 
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programming the DMA controller 
module, 13-14 
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error conditions, 13-17 
interrupts, 13-17 
data transfers, 13-15 
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bandwidth control, 13-17 
external request operation, 13-15 
external request timing 
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dual-adddress mode 
(figure 13-7), 13-16 
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steam mode, single-address 
mode (figure 13-6), 13-16 
DMA controller module programming model, 
13-5 
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DMA control register, 13-8 | 
BWC encoding (table 13-2), 13-9 
DMA controller module channel offsets 
(figure 13-4), 13-5 
DMA controller module register model per 
channel (figure 13-5), 13-5 
DMA interrupt vector register, 13-12 
DMA status register (DSR), 13-10 
source address register (SAR), 13-6 
DMA module overview, 13-3 
dual-address transfer (figure 13-3), 13-5 
single-address transfers (figure 13-2), 13-4 
DMA signal description, 13-3 
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cycle-steal mode, 13-12 
DRAM controller 
overview, 1-5 
DRAM controller signals 
DRAM read/write (DRAMW), 2-10 
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2-10 
synchronous DRAM column address strobe 
(SCAS), 2-10 
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(SRAS), 2-10 | . 
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DREQ, 10-1, 10-2 
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transfer, 13-5 
DUART module 
overview, 1-6 
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18-8 
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and SDA (table 18-17), 18-11 
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reset timing specification (table 18-5), 18-4 
timer module AC timing specification 
(table 18-9), 18-9 
UART module AC timing specifications 
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overview, 1-5 
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interrupt exception, 7-23 
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boundary-scan register, 17-7 
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disabling the IEEE 1149.1 standard operation, 


17-15 
disabling JTAG in JTAG mode 
(figure 17-3), 17-15 
disabling the IEEE 1149.1 standard operation 
(figure 17-4), 17-16 
HIGHZ instruction, 17-6 
IDCODE instruction, 17-5 
IDcode register, 17-7 
JTAG register descriptions, 17-4 
ID code register, 17-7 
JTAG boundary-scan register, 17-7 
boundary-scan bit definitions 
(table 17-3), 17-8 
JTAG bypass register, 17-13 
JTAG instruction shift register, 17-4 
BYPASS instruction, 17-6 
CLAMP instruction, 17-6 
_extext instruction, 17-5. 
HIGHZ instruction, 17-6 
JTAG instructions (table 17-2), 17-5 
sample/preload instruction, 17-5 
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17-5 
JTAG signal descriptions, 17-2 
JTAG pin descriptions (table 17-1), 17-3 
test data input/development serial input 
(TDI/DSI), 17-4 
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17-3 
test reset/development serial clock 
(TRST/DSCLK), 17-3 
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overview ,17-2 
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(figure 17-2), 17-14 
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MAC status register (MACSR), 3-11 
M-Bus 
initialization sequence, 15-11 
protocol, 15-3 
slave address transmission, 15-3 
START signal, 15-3 
system configuration, 15-2 
M-Bus module, 15-1 
interface features, 15-1 
M-Bus module block diagram (figure 15-1), 
15-2 
M-Bus programming examples, 15-11 
arbitration lost, 15-14 
flow chart of typical M-Bus interrupt 
routine (figure 15-4), 15-15 
generation of repeated START, 15-14 
generation of START, 15-11 
generation of STOP, 15-13 
post-transfer software response, 15-12 
slave mode, 15-14 
M-Bus protocol, 15-3 
arbitration procedure, 15-4 
clock stretching, 15-5 
clock synchronization, 15-5 
synchronized clock SCL (figure 15-3), 
15-5 
data transfer, 15-4 
handshaking, 15-5 
M-Bus standard communication protocol 
(figure 15-2), 15-3 
repeated START signal, 15-4 
slave address transmission, 15-3 
M-Bus system configuration, 15-2 
overview, 15-1 
programming model, 15- 6 
M-Bus address register (MADR), 15-6 
M-Bus control register (MBCR), 15-8 
M-Bus data |/O register (MBDR), 15-11 
M-Bus frequency divider register (MFDR), 
15-6 
M-Bus prescalar values (table 15-2), 
15-7 - 
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(table 15-1), 15-6 
M-Bus status register (MBSR), 15-9 
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M-Bus serial data (SDA), 2-12 
MCF5307 bus signals 
address bus, 2-3 
address strobe, 2-4 
read/write, 2-4 
transfer acknowledge (TA), 2-5 
transfer in progress, 2-5 
transfer start, 2-4 
MCF5307 introduction, 1-1 
overview, 1-4 
8 Kbyte unified cache, 1-5 
ColdFire processor core, 1-4 
DMA controller, 1-6 
DRAM controller, 1-5 
DUART module, 1-6 
internal 4 Kbyte SRAM, 1-5 
MCF5307 block diagram (figure 1-1), 1-4 
Motorola bus (M-Bus) module, 1-6 
multiply and accumulate (MAC) module, 1-5 
system interface, 1-6 
16-bit parallel-port interface, 1-7 
chip-selects, 1-7 
external bus interface, 1-6 
interrupt controller, 1-7 
JTAG, 1-7 
system debug interface, 1-7 
timer module, 1-6 
mechanical data, 19-1 
package, 19-1 
pinout, 19-1 
pinout tables (tables 19-1 through 19-4), 19-2 
memory operand addressing diagram, 3-20 
memory-to-memory transfer, 13-5 
MFDR, 15-6 
Motorola bus (M-Bus) module 
overview ,1-6 
MOVEC instruction, 5-8 
multiply and accumulate (MAC) module 
overview ,1-5 
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PADAT, 10-4 
PADDR, 10-3 
PAR, 10-1 
parallel port, 10-1 
introduction, 10-1 
parallal port operation, 10-3 
port A data direction register (PADDR), 10- 
3 
port A data register (PADAT), 10-4 
signal descriptions 
signals selected with PAR (table 10-1), 10- 
1 
signals descriptions, 10-1 
example code, 10-4 
pin assignment register, 10-1 
port A data direction register, 10-3 
port A data register, 10-4 
phase locked loop 
PLL features, 4-1 
block diagram of PLL module, 4-1 
PLL operation, 4-2 
normal mode, 4-2 
phase locked loop control register 
(PLLCR), 4-2 
phase locked loop control register (PLLCR) 
(figure 4-2), 4-3 
reduced-power mode, 4-2 
reset/initialization, 4-2 
PLL port list, 4-3 
inputs, 4-3 
BCLKO/PSTCLK divide ratios 
(table ), 4-4 
CLKIN frequency (table), 4-4 
outputs, 4-4 
PLL specifications, 4-1 
timing diagrams, 4-5 
PSTCLK and BCLKO, 4-5 
CLKIN, PSTCLK, and BCLKO timing 
(figure 4-3), 4-5 
RSTI timing, 4-5 
reset and initialization timing diagram 
(figure 4-4), 4-6 
pin assignment register, 10-1 
port A data direction register, 10-3 
port A data register, 10-4 
processor exceptions 
access error exception, 3-14 
programming model 
MAC programming model, 3-10 
supervisor programming model, 3-9 
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SDRAMC module 
asynchronous operation, 11-6 
asynchronous memory map, 11-6 
address and control registers, 11-10 
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(DACRO and DACR1) 11-8 
CAS encoding (table 11-5), 11-9 
extended data out (EDO), 11-10 
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11-9 
RAS precharge (PR) encoding 
(table 11-6), 11-9 
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RCD encoding (table 11-8), 
11-10 
RE encoding (table 11-4), 11-8 
refresh enable (RE), 11-8 
DRAM control register (DCR), 11-6 
no address multiplexing (NAM), 
11-7 
synchronous operation (SO), 11-7 
address modifer masks, 11-12 
address modifier bit definitions 
(table 11-14), 11-12 
base address mask encoding 
(table 11-12), 11-11 
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valid bit encoding 
(table 11-16), 11-13 
WP encoding (table 11-13), 11-12 
write protect (WP) 11-12 
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burst page-mode read operation 
(figure 11-7), 11-18 
burst page-mode write operation 
(figure 11-8), 11-19 
continuous page mode, 11-19 
continuous page-mode operation 
(figure 11-9), 11-20 
write hit in continuous page mode 
(figure 11-10), 11-21 
extended data out (EDO) operation, 
11-21 
EDO read operation, 11-22 
external master support, 11-23 
general operation guidelines, 11-13 
addressing muxing schemes 
(table 11-17), 11-13 
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memories (table 11-19), 11-15 
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